'./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}]}, 0x2f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:05 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:05 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:05 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = io_uring_setup(0x456f, &(0x7f0000000440)={0x0, 0xd29d, 0x4, 0x2, 0x212}) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clone3(&(0x7f0000001780)={0x101100000, &(0x7f00000005c0)=0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640), {0x1d}, &(0x7f0000000680)=""/4096, 0x1000, &(0x7f0000001680)=""/141, &(0x7f0000001740)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001800)={r1, 0x1000, 0x6, 0xffffffffffff0000}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448c9, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="504bfad98d18bbc41328b88196c63a709b3b88f579c6c47ca1c8f190c3db48eb1292dca9b485486e5f3da685cd8a9f76c98871fbd677b08038674c8d91676cbc8227160b03d51df8725a3a1f469fb0d4", 0x50}, {&(0x7f0000000080)="4c320b982efd34cfd7d979d1af801a160c8b4074723fa32ba85ea131e8d5a3daa1a3a4624cd8bfe4df810a0283d73f706b1063114bb304c8493f408a1a78f02835", 0x41}, {&(0x7f0000000100)="fa7ff1caa4a8a9e20cd927b706ad85688c6211ca9b4d3b2b543761aef3f5727d1f76a80bafc1787e8ec6e8dfe696228cbbd7d8abcca9453c4467e9d193b99f61d4f81beae39206ff86b4341dfa6c21ae638f8b625e2cf73ec0beee19a2b486439d45ada608dfa962f4ca9c45398566a513f96544ef9c32890d52337ebf9344636dad7556926a0df71dc1853da7f5dfcc0360c54baef024c886aa60ba002cd12a79d06bca4b06da2d87fd9b6f2d2b22f249eb5b7d93fd", 0xb6}, {&(0x7f00000001c0)="bf91eaca3f903c258b53488db3cd8b73feb2adaadf8fb1733c6a424f81c6eb041171dd6950ae75957939bbbb76668b52e864717140375a9f4eb5d0dd0b47ea1b4425c1908de87c5659ddb5374d14665afcae4d8d2b55acf1128f1415f89efd19576328ec8c2b998f39e2d743b3ab571e77e008bdc5a62c0a255519df367b19a2f6e02d12d6105022bd2d05059fedbbc4ce70a5e084d902fafa34986173e5fdb32a57d16e9301f7", 0xa7}, {&(0x7f0000000280)="55005c563ef15dff551a808f342cb7b89f7c02138376c997dc9d7130260467a366e0fc5fe3b87c76bb686f7be91b3a7a372ddb5deb14dd92f797d8fe09e14d00b06e756cdb34942508a2f2fb8ee24646d42bf7774c96054bceda0c7f4902bbd3d906bdaf132cf2b96a77e3fa55504e43", 0x70}], 0x5, &(0x7f00000018c0)=[@rights={{0x2c, 0x1, 0x1, [r2, r3, r1, r0, 0xffffffffffffffff, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @rights={{0x30, 0x1, 0x1, [r1, r7, r1, r8, r9, r0, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r12}}}], 0xa0, 0x8050}, 0x4850) 03:48:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x26840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x424, 0x0, 0x0, 0x13}}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2028.838084] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2028.840094] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2028.840861] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2028.843480] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2028.960959] Bluetooth: hci2: command 0x0406 tx timeout [ 2031.009041] Bluetooth: hci2: command 0x0406 tx timeout [ 2033.057079] Bluetooth: hci2: command 0x0406 tx timeout 03:48:16 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185"}, 0x53) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x0, 0x10}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:48:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) perf_event_open(&(0x7f0000001440)={0x0, 0x80, 0xcb, 0x3f, 0x1f, 0x9, 0x0, 0x3, 0x40000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x45, 0x1, 0xfffffffa, 0xd, 0x10001, 0x400, 0x800, 0x0, 0x3, 0x0, 0x20b1}, 0xffffffffffffffff, 0x8, r3, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/anycast6\x00') io_submit(0x0, 0x4, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x100, r4, &(0x7f0000000000)="c56b389f9165f7ff7744c73f6f9629642cc6a19ba1cef6f2d9b7e890fc3f1b720cc030236a9b9e13730d061a83d96f4ff5cd9ecb8c59345e9d6533f1b889b2dba83b1d626c3c9d06856ef63bda26d018ceba918ac8410e48526f50ac9df1db0b7d57cc4f605f74cf8c46f53314005b450bd616659a933071f054df492dd27291dba5510704137dbce08d9368db93263210a7808c775c275a6f43f2178abb61ee75749d1e6224088d9bc7309bbd7c97e4ad15b8bbe67638ae04bdc4193ac0c8ccd75e83ded0d01cc7a363035c38aac7d9b38a4200448003329c47fc89bdb4f3b336", 0xe1, 0x101, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000013c0)="a72bc5932e000000000000000000000058142cf49530ad00e4a95e17d6a6a3c70ff9b7c7b52e7db92be3cb818a0beef52b7d7d289728198abab0b7f8fc958f9b1e33de000f367bc9361b0851cb2f21d2856ec6f413e6b7d60268", 0x5a, 0x1f, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f00000003c0)="ab57f427284e083067625bd0b52cac75b5f031f95e164dcab52148e6d1423146c19d2e4d2df2cf06aa3067a08621335acc03702d3cc815ddd5d66989077ff1cd4157a978c550b27b9df0be980efe0c6778383195edacf21af556276e60179921abb17c6a8e55ebef2766cc678c9d4cc873847db3e215bac006bc87f0fbd675bad056561fd930f10ba9e9581b9646769a2667aba32c8843579b6f5e28f3b884cda286c5c1746aaec66e50c5ad7d3546b20401f1a1c0aa097d6c8fe0bc9d6b2dfdd068ffd313ef63d10ca0ed5bb90131312a68f0f5793dd6dd9d40ce238d66755ebe342b066d37e9f0114b2d90fe3e9c211c0a3af152690826d17ab85e65eee6d11798f5d06fa56a060484c7548a98ea77e666484fdd6001f881417fbde880b3c5c4b3f332db2481856946873fe54887f986303357b15ab870a14cff5e9360d91cebc9438ba0498945014071079c7a8df8e8c53019c7ba1d50472a49f2f6ab63405930c1e37196e8107d6192c575e6868f5c85d74c825d0f7d79f0a7dbb0df0c9d74107658bf606d870f671cfcc0881c6aede556b264e5060771447c888c879a56e3543a1e34072d955e9f82dce4d44518367e19ebf385122f53e5adec07ed7939c98fbd5290351ea79ccfb4e94939335e998de496b8c0051b8cf216250abebff54a6529b8c2519c59bb6d11ebeb31ca79bbf6def2e020c22bf056cc30c39b8698aadabf2da5882d765ee4c196ce3471b873a80be2f7a8cb0eadc0181aec974289b3feb4f8ee2befe11d7a9b8fa5139408cf3cb8a4af5964c98b2effcd5bab0518617af36737e9fda721b14c54904eae6dc7219c5447181c1fc5fc01d03d2ac5384fdcec5967d0eb84b2a2fbfe1fa22118318b2a20fabf609d31c5486308a72d472c8bd3053e5263baaee1902dfce33ad9a1e43eb221d43d425d79f0237bb2555ec1975d1c021760a4f730dc8b8799ee128f15ea27cb272222eb860ee3f37df5f1c9b2e8a841df743a951f4d398954b5edbd4643a0674bf6256323c0b0bfbef404b4f0adbec7a9ccae05e40ead6b8058e65df608554106a938c91a9504a370fe6d0080b7525d8ee7307cb5044a66094d8a9a9c7b7fd8af0599063fa05f02fc314221727c1ed25b7ad8af9a1cd21c1ec96df2a3f42d36c4098c22ec9e28f51b72523cfa4225dc99497614b8bffe0cf7cc22229c6c45d13f10cf21d90fb243771fc606bdf10cf9b11f20a48c508c6828a2ac9f982bc9b968c86cc63260e37fd368e6cc24bd05447b45c9e4b9052dac90a0b37860e28560f7c20506ae3f248dd5ff25a2e470defcaa193f83ce818d9e08aa3e23f2b125d62068a7cf4123d337ead9484351f95bbdb3379f847e4c83ca790c5277a1fe6b05505cee2a3cfafe1996f12afe349e0200d4d2058d7f1f8138dc29e2e90ba211a3ceb13ef3816d9b3405d73c3a98143c5d6e9b08d74cf67ad9e98834eb1a6babd870be3b1629a10b37e042161a57ee0bb4f756a169ba28ea99365acbd0060934dfd77706cac6c02690db1414d21b5bb77fd21ec4fa33d78a59c0952d491aed22469ec53acce1e98299929077fce1ca11ceffb56eb4e370dde6b42f926f11a0e9b5c5c0cde1bda73d23abb255ab53911af5a84ae5e761c106f713db372284c96d5ea845d0f8e48660d8b2a8022d6bc71a6e5d9ee4b65302cf723c43c7463f38b7f718cade3b859fbfb76441fa1b104b18f5c1a51b4aca3f427558030bd36d71f31a1e516965cce1552bf7c139dd4aa73cbd690b0bcfbb6af7e15370930e3ce7c0d73d172f7f7da29b338e3aeb794627a5290473a96ecf0df4342318665124bfe0638091878ee62feaf7cfdb52e6d4c2ad8a4caa535b64632b60edcd005c5df75656aa1cb9c5296be7a88d3b0fbb7dc5d0deac867cebd9732ba7e9c2710ada719dbd280ae7de90387bfb582d95ad016d4bb12ece41efd12b4f8be71d2a147760a2c1d498bbae554373d918f75105ec3072442f9d6f68fd8fc45bec18a4f89f81c7defe356cd1868ab7216966173265aaa507a81f5989b7e39358a5d4cb9e9ab099597e2dbfbdc505454692034985384b316916396e6b8b1108e75910e09246d90581be2e6b4daaaebf16de3ecf309173b66f60e735226afa8ee5cbaa3999c0d00733806e11ba0edff8cde17912777f1ae36bf07d9afe000b41a4decd5ddd2a6cfdc591ac42ea91a244df0e6b5cb74a807d939b201605db6af964042152f4e53fc7fde73ad49055627dc25117cb34fb5ff72b29b0a939e5aaa3c3d26f251a5e8f689f8fea79fe5974a8317e25fc0a1f17ce0c5930e234d50a1165848c18af19ad45bb6f69e46b91dc632fcefd38820383159917750176d63fdca934e4c8580e200f4abc356835282320a06f00eac05457009afdc32fa0a911e377b696b0321f87f044cce2eb3b723a7d25e81dd1ac68ac7e980eede1a32ea3ecfa7625725b252201f729e41a2b13c834b39aaebb342361cfadcba416cc0eb0a5d3f1156054faffd15fb430e019a8cad3408dcdd8a461da3f65d1642464bcde513511a9c052af3612fc35cfb81f9ebfc2a5e5d8e86d294362bf6aadf60d2ad4189ce2193eca283d9a9ce40485e3e63095f0253eff9d9b22fc3109f3098ffb4d44d032e426081bbb363543592f27dc80de32febde96c4103b96d123959490b4ea8cb49e47620c9ff7b4e9de0bfc963bf02e140d673ec72c6379265c3c448cfbd3d50fcce5a957959dac0b6d13b2be1bee869e5439f451ddfffbbd1382141a954ca0962e10bc431f11429a5e5a2c0d8240d3ba44c43b1a06b391e120ed2bd67c2c664431332490d0b6d5231ca9b36e7a17d05f2c82a5e8b98673094984c17bbd72421cb3ea75bb6eb3fcde338769d56c6d20e390947c5fe9f067a7e0eba98fd3b227915586b7255fb33be929122ea6a0225e3385b2ef99ee1a02835a33b4431a7a61cb6c66a2e472ec420edd6faa1bbe9eaf6dbb24ad03ddfadfa831a26efde7515619a5fd8bf6ea3557d9f1aad186ef31b254a455ca522ff2727b2dd582f321d24bcff5b9b14d83fc94a195523ebeb4f2db637a69bc0a04793166fb4e69a345d23070293ca582c3ac41fcc39531aab4c7f8f67c80355f571850371600a20d58582bad90a5efdd5867e8fa64b367ab55185482f5eeb2bdc00fd6e59881977cbea8991c8bdfb5c5ee526a988f77a649acbf194617c9535cc23a484c833407276c34bb1e9ba20397f9ae22366fdce743adb789322b5fffbb2b7853d9113d91fae3a3d88a4ea3c674defe4d35d6a4a2dd27a610b97e605d41ed49342ac7435508d57fd9c08aab6541b9fd8c90d4fcf4f0d655a41ca72fb8e8f16dc90c503a2095161bcdc0b3b0644cf0f3e612b6434cfbab2b5a32e73043999ad0927e1c47f6af6c0282ccf0b970cdc34fb5cf76bfdf6eef5c30a94e7c9c5573afe34f70f634dbf04eb0fd07670c4fe3be3771af498cdcaca4e48460131667a286bcd13d6c94e68ef1db1748dd01e112ca6c85ca187e6a0b3b88078c276a0018ef391c8ff9442c85e1dcf2da57fb52a574f9b4f19517d36cdcbc9673caa6e2296788b6c4d404922d71bee63bc110f8ea7e45b55045e22305e2d31f589003d197e56b45b883f78c905e5da752e7a30edc7e02b2233d3b144bb76e2d5e89bdcd3870ef7e23027b1ef98dea51ec92f13df8b26c50c47ab1cf20a5df064330941ec82d06d6259668a273187268072cdb17acfe4bfc93ca0f9cf2370f6e6530105e4d589bc6fe6fc310bdc2bcafc9ae55934cd6b9cb903aeea6d1ba46087fe0435ed7c5d300033af2e9d951179d1ff1610f31b5aec0af2b01e37aafac6c21a46ada3ab36679140e47642e02be9a71ec19f0ad0a50ae8c0ee3842831567f7d033f31d385459a6b5d0ba03c56fb8db14d64edfcbd90ce6ebea7f91f6155475c96620fdbd6dbe5035b385da5ad5ce5d3294d6a8e7b644c5c067ec95a16683b66611078014ab55bb602434a8b219063b5487d5c3980dfcff9202f4c94e4e143860595730eb353ab33caa9e9ccd4c3fa0d045fac2f93096ef5c94c17de02d4021b4fffc368410eff84dba21e03ebc47aa856c88dccfa5376a30cea1669fc5aadc7f6e8068000d75d3a25b4f340dac15e022bb4ff5c8a9e726ba13ceab6ce8c3b1016f042dc8101710ef543b416bb7ac0b3d521fd5c6456a7fcf82bc94f8d7dcebcc8ea627d0ac20f0acfb0280f4870602c85f15bce20d62cbc5109e28f7835a5cab575b4c14f887ce672be5f86ab0e4728edc0f2818954bc4a3abbfafc7d0049fa5d92d88deffd11c4939aa847d05e6cae68e655ce13588b2e8027e4f28a31bcf8e990fff13b4c91b8e0fcfdbb353da118785233327dc08f64346c5e7613291c8b1f48964b729d5fc93d5cb53e71e7bbab81584ae8086845304b9e16c6897b47b4a3e68913a849de32fa6b69899cf90fc33c48da41adf66f35670ea800d6fb1d0abc38607328301bfaaa997a64b793ad857af5b47492b2fa9a653a00baaf081fd7cff8ed703bf8b174d6c03668a12078de0144f90548d1d5fbb0c47469f5b1ce0147f3ea1a634a8c4e65aa9ee1c1e574eb97d08760c90755c91a6cb26f0ea6d5a04ce43eb469e7d49c7f71b7b54c280f541058c28b8b0b28b7c5198019ccb37e276c4ca8b8649957f73d24955c140a103b6b6cd49e3cb09c3cd6870547e44c701119332109248c7c9965e445f7b114a39902da4e0a51d9c8a0ac65153f01a4baa447aa35c888182bdc7fd4a8b57190ea69e00d4543dc410c1e71367c1693b944520d813411c3ed6ba078a933c4136f4e60f21e64f487f4a5d4b1b3b58fe1c86f60e3a44a24f709ac6188b199d9913aa055880871e142f8294c29f72e6f55fb29a31aee0477d83de6b5345f06d58e991524276c288079aaee7ab0fe9e393cb34bb8cdd4bd3a044866b19ddec8502e606a14c9c5b0e47de9fd89287c049b3c6fbd6bc39e60883816317b8e0dad9d305ca901654c40b942dc5375c96a387631773816446335439cfc1a2dfb89304b949d67535969a90d1f1c865013066422c9d2c6d915ddd9df504bbb6bfd0e964dc854790602650141ef5148dd935863be3d56df691eb7ab8d82cec04b5efbebc03d58dd98754a3bcf1d345256887ad115b5cb8b47fcc89b3530ee15afa9197e4c74f067ad38534f477a4f1bfbc85dabbdf5d0683801f20fa03129ad86c1bf7eeacd92e0d7b316e6c7e5766dd0ddd737ad02bdb5cfae2e53e47ea2c16698ef25a0570196ab0b55c60ce02d7e32535b158050c64db91aa08fc0da47ede8d62a782b224c8677f1a8166b30738dcdc045df9f4b4b7b164d2a38e91489e49812a2e0cc2ed9e528518802f33b32a096b58ec84ca55034690a42bc7cb204412a35ffd2d9a6aa55396b3d688e2562f7cae26fe335fd529ebf4743841c479b5afc0ab1f836183ece5eb9ad3e92d6b604c5c8bf6d94f49df4c5fa31297b29b3edc84f4b0dbfd63caaffc1e1433688bb769564ef05b873ab8049e51e029058653b9f8b2dc6e52fc5f6f6a4d156c7e5dd1aec36be616298f50170e0596c73c3f6d881d00e555cd2a9797b124ffc517a09ca59ebd6ee809f78373881f8df6ee00142ddb5768ca93ded17a5ccf36220258ac1329d0505b9699b53a43c3f7789fa4bcde6db871f38efaf374fd78fa507c5702c9fac9bba69f391ad6a2c4bcd0d64ecd5068f5a1f70d9fba1032ebf1b8bd14dc61e8f410236b7588cf00665ffeb3121f7e4f5bc6446e5ba746bd522d33627a08f0228c4391f9ce263131e2", 0x1000, 0x2, 0x0, 0x1, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xff, r0, &(0x7f0000000200)="9182182d3764cadf19daf5a023afa7c477d29b72277c13f371e42ef52f734d02292d9621e952aaa45eb0ee9a39e2b11aceec55ea5ff4090c7e6af1cc47ea0b703913917facd0c39b7120b13e5f1ab4bd51cc46bda43cc82a3b2028832bdcd8f203a452945d7a71be97d10b", 0x6b, 0xfffd, 0x0, 0x2}]) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r6) 03:48:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 03:48:16 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) perf_event_open(&(0x7f0000001440)={0x0, 0x80, 0xcb, 0x3f, 0x1f, 0x9, 0x0, 0x3, 0x40000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x45, 0x1, 0xfffffffa, 0xd, 0x10001, 0x400, 0x800, 0x0, 0x3, 0x0, 0x20b1}, 0xffffffffffffffff, 0x8, r3, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/anycast6\x00') io_submit(0x0, 0x4, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x100, r4, &(0x7f0000000000)="c56b389f9165f7ff7744c73f6f9629642cc6a19ba1cef6f2d9b7e890fc3f1b720cc030236a9b9e13730d061a83d96f4ff5cd9ecb8c59345e9d6533f1b889b2dba83b1d626c3c9d06856ef63bda26d018ceba918ac8410e48526f50ac9df1db0b7d57cc4f605f74cf8c46f53314005b450bd616659a933071f054df492dd27291dba5510704137dbce08d9368db93263210a7808c775c275a6f43f2178abb61ee75749d1e6224088d9bc7309bbd7c97e4ad15b8bbe67638ae04bdc4193ac0c8ccd75e83ded0d01cc7a363035c38aac7d9b38a4200448003329c47fc89bdb4f3b336", 0xe1, 0x101, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000013c0)="a72bc5932e000000000000000000000058142cf49530ad00e4a95e17d6a6a3c70ff9b7c7b52e7db92be3cb818a0beef52b7d7d289728198abab0b7f8fc958f9b1e33de000f367bc9361b0851cb2f21d2856ec6f413e6b7d60268", 0x5a, 0x1f, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f00000003c0)="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", 0x1000, 0x2, 0x0, 0x1, r5}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xff, r0, &(0x7f0000000200)="9182182d3764cadf19daf5a023afa7c477d29b72277c13f371e42ef52f734d02292d9621e952aaa45eb0ee9a39e2b11aceec55ea5ff4090c7e6af1cc47ea0b703913917facd0c39b7120b13e5f1ab4bd51cc46bda43cc82a3b2028832bdcd8f203a452945d7a71be97d10b", 0x6b, 0xfffd, 0x0, 0x2}]) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r6) 03:48:16 executing program 4: r0 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x200, 0x1, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x100, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x20000000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffffffd, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x5, 0x2, 0xffff0001, 0x4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x20, 0x4, 0x3ffc, 0x8, 0x9, "a47f4bdbbcba48e4"}) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000040)={0x223, 0x3}) ioctl$HCIINQUIRY(r1, 0x8940, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 03:48:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x14d400, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:48:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf51}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:48:16 executing program 4: r0 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x200, 0x1, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x100, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x20000000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffffffd, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x5, 0x2, 0xffff0001, 0x4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x20, 0x4, 0x3ffc, 0x8, 0x9, "a47f4bdbbcba48e4"}) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000040)={0x223, 0x3}) ioctl$HCIINQUIRY(r1, 0x8940, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 03:48:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x14d400, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:48:16 executing program 4: r0 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x200, 0x1, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x100, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x20000000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffffffd, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x5, 0x2, 0xffff0001, 0x4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x20, 0x4, 0x3ffc, 0x8, 0x9, "a47f4bdbbcba48e4"}) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000040)={0x223, 0x3}) ioctl$HCIINQUIRY(r1, 0x8940, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 03:48:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000001c0)="046463a5977ec083be58d020f737bccead39a17aa200d3a364c5813aea467e9bf45d6c6cbe724f9c29aa17df50c914d13e90fe073d95f2b75c35a16613fcf117fa1b2999e93e136157814200676ddba7d98f1777e301541430d234e8db80152e0e24dbae451bfee349d5e4f4c9ca9937a01c946b14d0a24fba647d74c8fb5113c3ba9c23fc99660982ae2aa0cbd3f4e0c87b7be7251b57b864ebf32d77c22673f3ad31405c1916edc848402a3ae833b1524595dbe4fc6d817e8075140e8ed80891dad65402e464e7d1abb2e5fc3f2bcc64548cfb9f65cdf726708fd4b2c0b6d66df8851fe33561b404f60f29438867280b", 0xf1}, {&(0x7f00000002c0)="d26ea7dc789a4f300bfd1cd5e3882275ce792bad4a161c5d31cc2af7bcb4c9205a196cbdeb28708b012ae00d4f73830edbfedadf71a02b7ae1a41a38a29b2d1b601373cf8d9a5c9c0acacacb40af1198bad6ed8cf61952cb08bb03eaadc8c862642b879c0c0676228b9583f7626b13bbc4a3bddf9005d8df74c484b617c381987ab79bdf4ca8a2286d", 0x89}, {&(0x7f0000000380)="ea7cdcf3733eebff37d623d0e65816f3fcf32ac58fbce417f6fdd4cc8d8b93c148c9246995d7b12084e49b375fcbaa59eb76b7451ab05cb39e20054187356c777a34b5568561acb8f30d777d733c7ce5f7fef77ed77b0401352ff027306f98179a1cb494cf31d1aab225c298994c3b7c16", 0x71}, {&(0x7f0000000400)="56778e5481b0a428f37ba9e48409838b5cbf8d120601", 0x16}, {&(0x7f0000000480)="ac71007e2135ffa2dea1c4cabf8990c57c86503b12c7b6081317317e0b0f8973b4aa1b114ce4b9ca5f1b5ee89e54b0198663595411190a2f98a8d34fe0ceb422409ed021151d3eafaed4379ea6525141cead074f106d60e124ae46f4dd266e594864313104e5b5bc984722a51240c325f3607813842f3f0ac953c58a6487f2f28226fb02e9831a8866f64834d93d36cdd870110f268d1404a21d3b9938fe3c3a69326c506040086be9ebe1f2b8cc76b874f9b97dc625fd", 0xb7}, {&(0x7f0000000540)="a6888214cf0b216c0d930fa0c92627b0661c70823f78c44f409f9422f4173d8486af60d0bcfa245061931604daaf27ea3596a553395abfbf2f2948f560306c65569dc1dadf11272dfc2a19e46787c9400c927c15a19c90b502da547637e307c673707da586cff149eaa5c70d671bd50a3ea20edfc1492a8a1813976bc8ee2c142055f8c8983981ae6eca0e9beb78d675206d9e", 0x93}, {&(0x7f0000000600)="3e168158438bebb7db5c1f4eba03841d6bc66abc1831c7794ee19a6f656928983956b3a4b413c1b39677b8c3d08c2267402c0314419f90537e99e05fe60092bdbd4d66ab13813ef075f2ec6187a545f1d0c31dd9d889f1408c3e2a420f5b89d2be6095d7631c05ab29c87ce6cb97413b3c2b117dfe5f9fb4fcf9df4f2bab8225c9935689700214081226e83c3f4168978eb84c33c959b1b0fb557b83842d5e478de5992ab78099b160476f1a31ddb3050518", 0xb2}], 0x7) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/211) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000740)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf74, 0x3, 0x2, 0x0, 0x3}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) r4 = eventfd(0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r5, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x0) 03:48:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x14d400, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:48:16 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185"}, 0x53) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x14d400, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) [ 2039.376005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2039.381784] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2039.395862] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2039.397628] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2039.402181] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2040.608997] Bluetooth: hci2: command 0x0406 tx timeout 03:48:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:48:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xf63c, 0x2) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 03:48:27 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:27 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) dup2(r0, r2) 03:48:27 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185"}, 0x53) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:48:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000001c0)="046463a5977ec083be58d020f737bccead39a17aa200d3a364c5813aea467e9bf45d6c6cbe724f9c29aa17df50c914d13e90fe073d95f2b75c35a16613fcf117fa1b2999e93e136157814200676ddba7d98f1777e301541430d234e8db80152e0e24dbae451bfee349d5e4f4c9ca9937a01c946b14d0a24fba647d74c8fb5113c3ba9c23fc99660982ae2aa0cbd3f4e0c87b7be7251b57b864ebf32d77c22673f3ad31405c1916edc848402a3ae833b1524595dbe4fc6d817e8075140e8ed80891dad65402e464e7d1abb2e5fc3f2bcc64548cfb9f65cdf726708fd4b2c0b6d66df8851fe33561b404f60f29438867280b", 0xf1}, {&(0x7f00000002c0)="d26ea7dc789a4f300bfd1cd5e3882275ce792bad4a161c5d31cc2af7bcb4c9205a196cbdeb28708b012ae00d4f73830edbfedadf71a02b7ae1a41a38a29b2d1b601373cf8d9a5c9c0acacacb40af1198bad6ed8cf61952cb08bb03eaadc8c862642b879c0c0676228b9583f7626b13bbc4a3bddf9005d8df74c484b617c381987ab79bdf4ca8a2286d", 0x89}, {&(0x7f0000000380)="ea7cdcf3733eebff37d623d0e65816f3fcf32ac58fbce417f6fdd4cc8d8b93c148c9246995d7b12084e49b375fcbaa59eb76b7451ab05cb39e20054187356c777a34b5568561acb8f30d777d733c7ce5f7fef77ed77b0401352ff027306f98179a1cb494cf31d1aab225c298994c3b7c16", 0x71}, {&(0x7f0000000400)="56778e5481b0a428f37ba9e48409838b5cbf8d120601", 0x16}, {&(0x7f0000000480)="ac71007e2135ffa2dea1c4cabf8990c57c86503b12c7b6081317317e0b0f8973b4aa1b114ce4b9ca5f1b5ee89e54b0198663595411190a2f98a8d34fe0ceb422409ed021151d3eafaed4379ea6525141cead074f106d60e124ae46f4dd266e594864313104e5b5bc984722a51240c325f3607813842f3f0ac953c58a6487f2f28226fb02e9831a8866f64834d93d36cdd870110f268d1404a21d3b9938fe3c3a69326c506040086be9ebe1f2b8cc76b874f9b97dc625fd", 0xb7}, {&(0x7f0000000540)="a6888214cf0b216c0d930fa0c92627b0661c70823f78c44f409f9422f4173d8486af60d0bcfa245061931604daaf27ea3596a553395abfbf2f2948f560306c65569dc1dadf11272dfc2a19e46787c9400c927c15a19c90b502da547637e307c673707da586cff149eaa5c70d671bd50a3ea20edfc1492a8a1813976bc8ee2c142055f8c8983981ae6eca0e9beb78d675206d9e", 0x93}, {&(0x7f0000000600)="3e168158438bebb7db5c1f4eba03841d6bc66abc1831c7794ee19a6f656928983956b3a4b413c1b39677b8c3d08c2267402c0314419f90537e99e05fe60092bdbd4d66ab13813ef075f2ec6187a545f1d0c31dd9d889f1408c3e2a420f5b89d2be6095d7631c05ab29c87ce6cb97413b3c2b117dfe5f9fb4fcf9df4f2bab8225c9935689700214081226e83c3f4168978eb84c33c959b1b0fb557b83842d5e478de5992ab78099b160476f1a31ddb3050518", 0xb2}], 0x7) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/211) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000740)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf74, 0x3, 0x2, 0x0, 0x3}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) r4 = eventfd(0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r5, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x0) 03:48:27 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:28 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x141441, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x18, 0x12b, &(0x7f0000000500)}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x79, 0x8, 0x3ff, 0x6, 0x7, "db7c35d4c54a072a"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x1, 0x1, 0x100}) 03:48:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000001c0)="046463a5977ec083be58d020f737bccead39a17aa200d3a364c5813aea467e9bf45d6c6cbe724f9c29aa17df50c914d13e90fe073d95f2b75c35a16613fcf117fa1b2999e93e136157814200676ddba7d98f1777e301541430d234e8db80152e0e24dbae451bfee349d5e4f4c9ca9937a01c946b14d0a24fba647d74c8fb5113c3ba9c23fc99660982ae2aa0cbd3f4e0c87b7be7251b57b864ebf32d77c22673f3ad31405c1916edc848402a3ae833b1524595dbe4fc6d817e8075140e8ed80891dad65402e464e7d1abb2e5fc3f2bcc64548cfb9f65cdf726708fd4b2c0b6d66df8851fe33561b404f60f29438867280b", 0xf1}, {&(0x7f00000002c0)="d26ea7dc789a4f300bfd1cd5e3882275ce792bad4a161c5d31cc2af7bcb4c9205a196cbdeb28708b012ae00d4f73830edbfedadf71a02b7ae1a41a38a29b2d1b601373cf8d9a5c9c0acacacb40af1198bad6ed8cf61952cb08bb03eaadc8c862642b879c0c0676228b9583f7626b13bbc4a3bddf9005d8df74c484b617c381987ab79bdf4ca8a2286d", 0x89}, {&(0x7f0000000380)="ea7cdcf3733eebff37d623d0e65816f3fcf32ac58fbce417f6fdd4cc8d8b93c148c9246995d7b12084e49b375fcbaa59eb76b7451ab05cb39e20054187356c777a34b5568561acb8f30d777d733c7ce5f7fef77ed77b0401352ff027306f98179a1cb494cf31d1aab225c298994c3b7c16", 0x71}, {&(0x7f0000000400)="56778e5481b0a428f37ba9e48409838b5cbf8d120601", 0x16}, {&(0x7f0000000480)="ac71007e2135ffa2dea1c4cabf8990c57c86503b12c7b6081317317e0b0f8973b4aa1b114ce4b9ca5f1b5ee89e54b0198663595411190a2f98a8d34fe0ceb422409ed021151d3eafaed4379ea6525141cead074f106d60e124ae46f4dd266e594864313104e5b5bc984722a51240c325f3607813842f3f0ac953c58a6487f2f28226fb02e9831a8866f64834d93d36cdd870110f268d1404a21d3b9938fe3c3a69326c506040086be9ebe1f2b8cc76b874f9b97dc625fd", 0xb7}, {&(0x7f0000000540)="a6888214cf0b216c0d930fa0c92627b0661c70823f78c44f409f9422f4173d8486af60d0bcfa245061931604daaf27ea3596a553395abfbf2f2948f560306c65569dc1dadf11272dfc2a19e46787c9400c927c15a19c90b502da547637e307c673707da586cff149eaa5c70d671bd50a3ea20edfc1492a8a1813976bc8ee2c142055f8c8983981ae6eca0e9beb78d675206d9e", 0x93}, {&(0x7f0000000600)="3e168158438bebb7db5c1f4eba03841d6bc66abc1831c7794ee19a6f656928983956b3a4b413c1b39677b8c3d08c2267402c0314419f90537e99e05fe60092bdbd4d66ab13813ef075f2ec6187a545f1d0c31dd9d889f1408c3e2a420f5b89d2be6095d7631c05ab29c87ce6cb97413b3c2b117dfe5f9fb4fcf9df4f2bab8225c9935689700214081226e83c3f4168978eb84c33c959b1b0fb557b83842d5e478de5992ab78099b160476f1a31ddb3050518", 0xb2}], 0x7) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/211) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000740)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf74, 0x3, 0x2, 0x0, 0x3}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) r4 = eventfd(0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r5, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x0) [ 2051.322851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2051.324664] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2052.513087] Bluetooth: hci2: command 0x0406 tx timeout 03:48:38 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:38 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b98539"}, 0x59) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:38 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$FITHAW(r1, 0xc0045878) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1ff}, 0x0, 0x0, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) 03:48:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000001c0)="046463a5977ec083be58d020f737bccead39a17aa200d3a364c5813aea467e9bf45d6c6cbe724f9c29aa17df50c914d13e90fe073d95f2b75c35a16613fcf117fa1b2999e93e136157814200676ddba7d98f1777e301541430d234e8db80152e0e24dbae451bfee349d5e4f4c9ca9937a01c946b14d0a24fba647d74c8fb5113c3ba9c23fc99660982ae2aa0cbd3f4e0c87b7be7251b57b864ebf32d77c22673f3ad31405c1916edc848402a3ae833b1524595dbe4fc6d817e8075140e8ed80891dad65402e464e7d1abb2e5fc3f2bcc64548cfb9f65cdf726708fd4b2c0b6d66df8851fe33561b404f60f29438867280b", 0xf1}, {&(0x7f00000002c0)="d26ea7dc789a4f300bfd1cd5e3882275ce792bad4a161c5d31cc2af7bcb4c9205a196cbdeb28708b012ae00d4f73830edbfedadf71a02b7ae1a41a38a29b2d1b601373cf8d9a5c9c0acacacb40af1198bad6ed8cf61952cb08bb03eaadc8c862642b879c0c0676228b9583f7626b13bbc4a3bddf9005d8df74c484b617c381987ab79bdf4ca8a2286d", 0x89}, {&(0x7f0000000380)="ea7cdcf3733eebff37d623d0e65816f3fcf32ac58fbce417f6fdd4cc8d8b93c148c9246995d7b12084e49b375fcbaa59eb76b7451ab05cb39e20054187356c777a34b5568561acb8f30d777d733c7ce5f7fef77ed77b0401352ff027306f98179a1cb494cf31d1aab225c298994c3b7c16", 0x71}, {&(0x7f0000000400)="56778e5481b0a428f37ba9e48409838b5cbf8d120601", 0x16}, {&(0x7f0000000480)="ac71007e2135ffa2dea1c4cabf8990c57c86503b12c7b6081317317e0b0f8973b4aa1b114ce4b9ca5f1b5ee89e54b0198663595411190a2f98a8d34fe0ceb422409ed021151d3eafaed4379ea6525141cead074f106d60e124ae46f4dd266e594864313104e5b5bc984722a51240c325f3607813842f3f0ac953c58a6487f2f28226fb02e9831a8866f64834d93d36cdd870110f268d1404a21d3b9938fe3c3a69326c506040086be9ebe1f2b8cc76b874f9b97dc625fd", 0xb7}, {&(0x7f0000000540)="a6888214cf0b216c0d930fa0c92627b0661c70823f78c44f409f9422f4173d8486af60d0bcfa245061931604daaf27ea3596a553395abfbf2f2948f560306c65569dc1dadf11272dfc2a19e46787c9400c927c15a19c90b502da547637e307c673707da586cff149eaa5c70d671bd50a3ea20edfc1492a8a1813976bc8ee2c142055f8c8983981ae6eca0e9beb78d675206d9e", 0x93}, {&(0x7f0000000600)="3e168158438bebb7db5c1f4eba03841d6bc66abc1831c7794ee19a6f656928983956b3a4b413c1b39677b8c3d08c2267402c0314419f90537e99e05fe60092bdbd4d66ab13813ef075f2ec6187a545f1d0c31dd9d889f1408c3e2a420f5b89d2be6095d7631c05ab29c87ce6cb97413b3c2b117dfe5f9fb4fcf9df4f2bab8225c9935689700214081226e83c3f4168978eb84c33c959b1b0fb557b83842d5e478de5992ab78099b160476f1a31ddb3050518", 0xb2}], 0x7) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/211) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000740)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf74, 0x3, 0x2, 0x0, 0x3}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) r4 = eventfd(0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r5, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x0) 03:48:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 03:48:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x0, 0x1, 0xd5, 0x6, 0x10, "8f89bf7e75d8c448d2d406e7332b398a326501"}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 03:48:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x141441, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x18, 0x12b, &(0x7f0000000500)}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x79, 0x8, 0x3ff, 0x6, 0x7, "db7c35d4c54a072a"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x1, 0x1, 0x100}) 03:48:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:48:38 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:48:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x0, 0x0, 0x1}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 03:48:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:48:38 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b98539"}, 0x59) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2061.952224] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2061.955208] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2064.435031] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2064.441430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2064.443614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2064.450214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2064.453429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2066.529037] Bluetooth: hci1: command tx timeout [ 2068.577096] Bluetooth: hci1: command tx timeout [ 2070.625044] Bluetooth: hci1: command tx timeout [ 2072.673024] Bluetooth: hci1: command tx timeout [ 2083.722989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.724129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.808521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.809600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2085.021372] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2085.023372] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2085.026326] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2085.027690] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:49:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) (fail_nth: 1) 03:49:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) (fail_nth: 1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:14 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b98539"}, 0x59) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) (fail_nth: 1) 03:49:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (fail_nth: 1) 03:49:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r8, r6) r9 = gettid() process_vm_writev(r9, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x18, 0x34, 0x0, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, r10}}}], 0x58, 0x8000}, 0x20000000) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 03:49:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x100000000, 0x8, 0x7, 0x1196e00, 0x1, [{0x3, 0x7, 0x7, '\x00', 0x2200}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2096.565750] FAULT_INJECTION: forcing a failure. [ 2096.565750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.566779] CPU: 1 UID: 0 PID: 18828 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2096.566796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.566804] Call Trace: [ 2096.566809] [ 2096.566814] dump_stack_lvl+0xfa/0x120 [ 2096.566839] should_fail_ex+0x4d7/0x5e0 [ 2096.566864] _copy_from_user+0x30/0xd0 [ 2096.566879] set_selection_user+0x73/0x1e0 [ 2096.566904] ? __pfx_set_selection_user+0x10/0x10 [ 2096.566923] ? __might_fault+0xe0/0x190 [ 2096.566941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2096.566960] tioclinux+0x2c5/0x620 [ 2096.566975] vt_ioctl+0x22dc/0x2db0 [ 2096.566994] ? __pfx_vt_ioctl+0x10/0x10 [ 2096.567009] ? lock_acquire+0x15e/0x2f0 [ 2096.567026] ? perf_trace_lock+0xb5/0x5d0 [ 2096.567040] ? find_held_lock+0x2b/0x80 [ 2096.567059] ? get_pid_task+0xfd/0x250 [ 2096.567081] ? perf_trace_lock+0xb5/0x5d0 [ 2096.567099] ? __pfx_perf_trace_lock+0x10/0x10 [ 2096.567113] ? proc_fail_nth_write+0x97/0x220 [ 2096.567127] ? find_held_lock+0x2b/0x80 [ 2096.567146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2096.567164] ? __pfx_vt_ioctl+0x10/0x10 [ 2096.567181] tty_ioctl+0x78b/0x1810 [ 2096.567199] ? __pfx_tty_ioctl+0x10/0x10 [ 2096.567214] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 2096.567231] ? __mutex_unlock_slowpath+0x111/0x7b0 [ 2096.567251] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2096.567268] ? prepare_call_rcu_zapped+0x2c/0x80 [ 2096.567287] ? __fget_files+0x34/0x3b0 [ 2096.567308] ? find_held_lock+0x2b/0x80 [ 2096.567327] ? __fget_files+0x203/0x3b0 [ 2096.567347] ? lock_release+0xc8/0x290 [ 2096.567366] ? selinux_file_ioctl+0xb9/0x280 [ 2096.567383] ? __pfx_tty_ioctl+0x10/0x10 [ 2096.567400] __x64_sys_ioctl+0x18f/0x210 [ 2096.567421] do_syscall_64+0xbf/0x360 [ 2096.567442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.567456] RIP: 0033:0x7f04eb957b19 [ 2096.567467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.567479] RSP: 002b:00007f04e8ecd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2096.567492] RAX: ffffffffffffffda RBX: 00007f04eba6af60 RCX: 00007f04eb957b19 [ 2096.567500] RDX: 0000000020000080 RSI: 000000000000541c RDI: 0000000000000003 [ 2096.567508] RBP: 00007f04e8ecd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.567516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.567523] R13: 00007fff11b5330f R14: 00007f04e8ecd300 R15: 0000000000022000 [ 2096.567543] [ 2096.590639] FAULT_INJECTION: forcing a failure. [ 2096.590639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.591708] CPU: 1 UID: 0 PID: 18830 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2096.591725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.591732] Call Trace: [ 2096.591736] [ 2096.591741] dump_stack_lvl+0xfa/0x120 [ 2096.591762] should_fail_ex+0x4d7/0x5e0 [ 2096.591785] _copy_from_user+0x30/0xd0 [ 2096.591800] set_selection_user+0x73/0x1e0 [ 2096.591818] ? __pfx_set_selection_user+0x10/0x10 [ 2096.591837] ? __might_fault+0xe0/0x190 [ 2096.591853] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2096.591870] tioclinux+0x2c5/0x620 [ 2096.591884] vt_ioctl+0x22dc/0x2db0 [ 2096.591903] ? __pfx_vt_ioctl+0x10/0x10 [ 2096.591922] ? lock_acquire+0x15e/0x2f0 [ 2096.591936] ? perf_trace_lock+0xb5/0x5d0 [ 2096.591950] ? find_held_lock+0x2b/0x80 [ 2096.591969] ? get_pid_task+0xfd/0x250 [ 2096.591990] ? perf_trace_lock+0xb5/0x5d0 [ 2096.592008] ? __pfx_perf_trace_lock+0x10/0x10 [ 2096.592022] ? proc_fail_nth_write+0x97/0x220 [ 2096.592035] ? find_held_lock+0x2b/0x80 [ 2096.592054] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2096.592071] ? __pfx_vt_ioctl+0x10/0x10 [ 2096.592088] tty_ioctl+0x78b/0x1810 [ 2096.592105] ? __pfx_tty_ioctl+0x10/0x10 [ 2096.592130] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 2096.592145] ? __mutex_unlock_slowpath+0x111/0x7b0 [ 2096.592164] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2096.592181] ? prepare_call_rcu_zapped+0x2c/0x80 [ 2096.592200] ? __fget_files+0x34/0x3b0 [ 2096.592219] ? find_held_lock+0x2b/0x80 [ 2096.592238] ? __fget_files+0x203/0x3b0 [ 2096.592257] ? lock_release+0xc8/0x290 [ 2096.592277] ? selinux_file_ioctl+0xb9/0x280 [ 2096.592294] ? __pfx_tty_ioctl+0x10/0x10 [ 2096.592311] __x64_sys_ioctl+0x18f/0x210 [ 2096.592331] do_syscall_64+0xbf/0x360 [ 2096.592351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.592363] RIP: 0033:0x7fc2002eeb19 [ 2096.592373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.592385] RSP: 002b:00007fc1fd864188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2096.592397] RAX: ffffffffffffffda RBX: 00007fc200401f60 RCX: 00007fc2002eeb19 [ 2096.592406] RDX: 0000000020000080 RSI: 000000000000541c RDI: 0000000000000003 [ 2096.592414] RBP: 00007fc1fd8641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.592422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.592429] R13: 00007ffe6bcc0c5f R14: 00007fc1fd864300 R15: 0000000000022000 [ 2096.592449] 03:49:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) (fail_nth: 2) 03:49:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) (fail_nth: 2) [ 2096.693474] FAULT_INJECTION: forcing a failure. [ 2096.693474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.694642] CPU: 1 UID: 0 PID: 18838 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2096.694659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.694667] Call Trace: [ 2096.694671] [ 2096.694678] dump_stack_lvl+0xfa/0x120 [ 2096.694721] should_fail_ex+0x4d7/0x5e0 [ 2096.694744] _copy_from_user+0x30/0xd0 [ 2096.694759] __x64_sys_sendfile64+0x11d/0x210 [ 2096.694775] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2096.694797] do_syscall_64+0xbf/0x360 [ 2096.694816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.694829] RIP: 0033:0x7f6ecff00b19 [ 2096.694839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.694850] RSP: 002b:00007f6ecd476188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2096.694862] RAX: ffffffffffffffda RBX: 00007f6ed0013f60 RCX: 00007f6ecff00b19 [ 2096.694870] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000005 [ 2096.694877] RBP: 00007f6ecd4761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.694885] R10: 0000000068e146a1 R11: 0000000000000246 R12: 0000000000000001 [ 2096.694892] R13: 00007ffc7a6c36df R14: 00007f6ecd476300 R15: 0000000000022000 [ 2096.694915] 03:49:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) (fail_nth: 2) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:14 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:49:14 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2096.816332] selection: kmalloc() failed 03:49:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x10000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x3, 'team0\x00', {0x4}, 0xac5c}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2096.837116] FAULT_INJECTION: forcing a failure. [ 2096.837116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.837176] CPU: 0 UID: 0 PID: 18845 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2096.837207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.837222] Call Trace: [ 2096.837230] [ 2096.837240] dump_stack_lvl+0xfa/0x120 [ 2096.837284] should_fail_ex+0x4d7/0x5e0 [ 2096.837330] _copy_to_user+0x32/0xd0 [ 2096.837360] simple_read_from_buffer+0xe0/0x180 [ 2096.837401] proc_fail_nth_read+0x18a/0x240 [ 2096.837429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2096.837456] ? security_file_permission+0x22/0x90 [ 2096.837495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2096.837520] vfs_read+0x1eb/0xbe0 [ 2096.837552] ? __pfx_vfs_read+0x10/0x10 [ 2096.837577] ? lock_release+0xc8/0x290 [ 2096.837612] ? __fget_files+0x20d/0x3b0 [ 2096.837671] ksys_read+0x121/0x240 [ 2096.837694] ? __pfx_ksys_read+0x10/0x10 [ 2096.837730] do_syscall_64+0xbf/0x360 [ 2096.837769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.837794] RIP: 0033:0x7fc2002a169c [ 2096.837813] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2096.837836] RSP: 002b:00007fc1fd864170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2096.837860] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2002a169c [ 2096.837876] RDX: 000000000000000f RSI: 00007fc1fd8641e0 RDI: 0000000000000004 [ 2096.837890] RBP: 00007fc1fd8641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.837905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.837920] R13: 00007ffe6bcc0c5f R14: 00007fc1fd864300 R15: 0000000000022000 [ 2096.837958] [ 2096.969959] FAULT_INJECTION: forcing a failure. [ 2096.969959] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.970883] CPU: 1 UID: 0 PID: 18855 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2096.970900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.970911] Call Trace: [ 2096.970917] [ 2096.970922] dump_stack_lvl+0xfa/0x120 [ 2096.970967] should_fail_ex+0x4d7/0x5e0 [ 2096.970992] should_failslab+0xc2/0x120 [ 2096.971009] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2096.971031] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 2096.971047] ? perf_swevent_event+0x63/0x3f0 [ 2096.971069] ? alloc_pipe_info+0x10d/0x5a0 [ 2096.971088] alloc_pipe_info+0x10d/0x5a0 [ 2096.971106] splice_direct_to_actor+0x78c/0x9d0 [ 2096.971127] ? __pfx_direct_splice_actor+0x10/0x10 [ 2096.971149] ? lock_acquire+0x82/0x2f0 [ 2096.971168] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2096.971189] ? lock_acquire+0x15e/0x2f0 [ 2096.971207] do_splice_direct+0x179/0x250 [ 2096.971225] ? __pfx_do_splice_direct+0x10/0x10 [ 2096.971244] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2096.971265] ? security_file_permission+0x22/0x90 [ 2096.971289] do_sendfile+0xa8e/0xdc0 [ 2096.971315] ? __pfx_do_sendfile+0x10/0x10 [ 2096.971336] ? __might_fault+0xe0/0x190 [ 2096.971360] __x64_sys_sendfile64+0x14c/0x210 [ 2096.971377] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2096.971400] do_syscall_64+0xbf/0x360 [ 2096.971422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2096.971436] RIP: 0033:0x7f6ecff00b19 [ 2096.971447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.971459] RSP: 002b:00007f6ecd476188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2096.971472] RAX: ffffffffffffffda RBX: 00007f6ed0013f60 RCX: 00007f6ecff00b19 [ 2096.971482] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000005 [ 2096.971490] RBP: 00007f6ecd4761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.971497] R10: 0000000068e146a1 R11: 0000000000000246 R12: 0000000000000001 [ 2096.971505] R13: 00007ffc7a6c36df R14: 00007f6ecd476300 R15: 0000000000022000 [ 2096.971526] [ 2097.409053] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2098.977966] Bluetooth: hci2: command 0x0406 tx timeout 03:49:23 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) (fail_nth: 3) 03:49:23 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3"}, 0x5c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='personality\x00') bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 03:49:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) (fail_nth: 3) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:23 executing program 0: ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x1, 0x7, 0x6, 0x7fff, 0x4}}) 03:49:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) fcntl$dupfd(r1, 0x406, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)={{0xcc, 0xff, 0x0, 0xbf, 0x2bf, 0x40000000, 0xac, 0x7}, "0dfa4ba4512a5460c83b22fc54a2b8b83ffe6cb8a1eae78719007a225b50ff51c2deff6e1035c0d060b5bbcc83322a24ff35777c8507ca11a822f01c6876695fc9c99814ea87b795421e2d812665b00df519b9836bbcdcd9", ['\x00', '\x00', '\x00', '\x00']}, 0x478) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) write$bt_hci(r3, &(0x7f0000000080)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x2, 0x8001, 0xbca7, 0xfff8, 0x6, 0x9}}}, 0x12) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:49:23 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) (fail_nth: 4) 03:49:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x8001, 0x0, 0x80000000, 0xa11, 0x7f, "a4d255ab54b44ba6865dcae7a93ac9d484e367", 0x81, 0x85}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) 03:49:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) (fail_nth: 4) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2106.270181] FAULT_INJECTION: forcing a failure. [ 2106.270181] name failslab, interval 1, probability 0, space 0, times 0 03:49:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) [ 2106.270211] CPU: 0 UID: 0 PID: 18891 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2106.270229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.270237] Call Trace: [ 2106.270241] [ 2106.270247] dump_stack_lvl+0xfa/0x120 [ 2106.270272] should_fail_ex+0x4d7/0x5e0 [ 2106.270296] ? alloc_pipe_info+0x1e8/0x5a0 [ 2106.270311] should_failslab+0xc2/0x120 [ 2106.270327] __kmalloc_noprof+0xb4/0x4b0 [ 2106.270346] ? perf_swevent_event+0x63/0x3f0 [ 2106.270369] alloc_pipe_info+0x1e8/0x5a0 03:49:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) (fail_nth: 5) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2106.270385] splice_direct_to_actor+0x78c/0x9d0 [ 2106.270405] ? __pfx_direct_splice_actor+0x10/0x10 [ 2106.270423] ? lock_acquire+0x82/0x2f0 [ 2106.270441] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2106.270460] ? lock_acquire+0x15e/0x2f0 [ 2106.270477] do_splice_direct+0x179/0x250 [ 2106.270495] ? __pfx_do_splice_direct+0x10/0x10 [ 2106.270499] FAULT_INJECTION: forcing a failure. [ 2106.270499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2106.270514] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2106.270534] ? security_file_permission+0x22/0x90 [ 2106.270558] do_sendfile+0xa8e/0xdc0 [ 2106.270582] ? __pfx_do_sendfile+0x10/0x10 [ 2106.270602] ? __might_fault+0xe0/0x190 [ 2106.270624] __x64_sys_sendfile64+0x14c/0x210 [ 2106.270640] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2106.270662] do_syscall_64+0xbf/0x360 [ 2106.270682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2106.270696] RIP: 0033:0x7f6ecff00b19 [ 2106.270706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2106.270719] RSP: 002b:00007f6ecd476188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2106.270732] RAX: ffffffffffffffda RBX: 00007f6ed0013f60 RCX: 00007f6ecff00b19 [ 2106.270740] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000005 [ 2106.270748] RBP: 00007f6ecd4761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2106.270756] R10: 0000000068e146a1 R11: 0000000000000246 R12: 0000000000000001 [ 2106.270764] R13: 00007ffc7a6c36df R14: 00007f6ecd476300 R15: 0000000000022000 [ 2106.270782] [ 2106.270791] CPU: 1 UID: 0 PID: 18886 Comm: syz-executor.7 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2106.270810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.270818] Call Trace: [ 2106.270823] [ 2106.270828] dump_stack_lvl+0xfa/0x120 [ 2106.270854] should_fail_ex+0x4d7/0x5e0 [ 2106.270878] _copy_to_user+0x32/0xd0 [ 2106.270893] simple_read_from_buffer+0xe0/0x180 [ 2106.270920] proc_fail_nth_read+0x18a/0x240 [ 2106.270939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2106.270952] ? security_file_permission+0x22/0x90 [ 2106.270972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2106.270985] vfs_read+0x1eb/0xbe0 [ 2106.271000] ? __pfx_vfs_read+0x10/0x10 [ 2106.271013] ? lock_release+0xc8/0x290 [ 2106.271031] ? __fget_files+0x20d/0x3b0 [ 2106.271057] ksys_read+0x121/0x240 [ 2106.271069] ? __pfx_ksys_read+0x10/0x10 [ 2106.271086] do_syscall_64+0xbf/0x360 [ 2106.271106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2106.271120] RIP: 0033:0x7f04eb90a69c [ 2106.271130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2106.271142] RSP: 002b:00007f04e8ecd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2106.271155] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04eb90a69c [ 2106.271163] RDX: 000000000000000f RSI: 00007f04e8ecd1e0 RDI: 0000000000000004 [ 2106.271171] RBP: 00007f04e8ecd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2106.271178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2106.271186] R13: 00007fff11b5330f R14: 00007f04e8ecd300 R15: 0000000000022000 [ 2106.271204] [ 2108.130014] Bluetooth: hci2: command 0x0406 tx timeout 03:49:35 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:49:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:35 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3"}, 0x5c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_local_ext_features={{0x1004, 0x1}}}, 0x5) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:49:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:35 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x3, 0xfffffffffffffffc, 0x3}) 03:49:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "71bde798f636ed8a324dd146ff4373d6", "c377ab3e6f00075266047dd80d18a73e", "ea3654409e3dbd61fcf9b4604b66428b", "c04450a928db11f87850714a4eba1933"}}}, 0x4a) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_rssi={{0x1405, 0x2}, {0xc9}}}, 0x6) 03:49:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:35 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:49:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:35 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfbfb, 0x2}, 0x6) 03:49:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x67, "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"}) 03:49:44 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:49:44 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3"}, 0x5c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:44 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r1, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB="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", @ANYBLOB="3f400000000000002e2f666c65302a64dfe261f49eb1361e439f40d20000"]) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5f6c73daa92e8fb9e134e6fc7d7c2c1ee7219c12a10f7dbffe9b0937dac65ca8dead524116e22f0a13873817b3dcc4440cd28423ce6b6d6c2212971a4393f6dbc98868bbc6832f") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:49:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x80, 0x3}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:49:44 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000073cc0)={{0x0, 0x80000000000, 0x4, 0x9, 0xef5, 0x3, 0x7cce, 0x5, 0x0, 0x8, 0x0, 0x80000001, 0x80000001, 0x9, 0x83d}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000074cc0)=ANY=[@ANYRES64=0x0, @ANYBLOB="7f000000000000005200000000000000ffffff7f00000000530d000000000000faff13000000ffff001000000000000003000000000000f801000000d50800000300000000000000020000000000000001000000000000000200000000000000180000001194000200"/128]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000074d80)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "0f2673617a3000"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000075d80)={{0x0, 0x7ff, 0x8000, 0x1, 0x3, 0x7, 0x8001, 0x0, 0x95, 0x100, 0xab, 0x9, 0x7ff, 0x412, 0x5}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000075e00)={0x0, 0x0, "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", "988c4f8677f72b3fb63babeea803e6597cd2730bdbab599b9733c609ffdcdcb77a13ab3d65329afece30758ed2ec8a9fc6bd8996f9702441204d6dc82c0efe4fbeacf6a4e138d2851c750f7e2502b0aadd833328b2cb16fcae916d036d80304a10f4c9e395d80c092d5ddd296818593ac6b7ff53a1f6890ee07edd31b0324201aa93124f074fdd1c96e4349ad7cdcd1c6943740a4000b395c7b2d933e55da26fd295f53aec822b62494d2970e11d0039abb36338fbdc168bab8310b847dc56bdf7db1401e72c34056d603679fcd88ca8daaef57a271a088ec38be67098e50b0ece1f2842dc760bd37277b379997671fbed58aba3e581b6e1da4248aadc9a0b919f4b153be1d1775d45240da46ef6bb96f8e7f5286dbdb82a2dc9dadc79c8804bebb656c24d92fa4a4f15fd7fa4ad3323e0b24278089ac2569197f1190a8e27ea45ff505a91696a0f961ab9a51937e56606f36051e15f7a47cd5bd50e18d7ad4a2d5375013c70517494787444744a51c1e376d696fc9feda9a9f18ed48fa04530adaec6c849c46d4eeea2c623ddabafdb704e0cd774b6e6d6192feaad109064ce0e0d98a83a9d6e45d6e1b34d4d789243475708279738e73e227729f3ddfd84775c424841dff6c329c4765196225c4d52bc90587e53bae87b3f668353eb668714c62cf67aa4e683ec96d818e0b7f95e852c03bd7064b0fe3d2afb12491b115b3e3979418c9f7d7a9462c0dd920e42677c181ac366e0008b01fbd850ddd48b51bb5245da453053ac081b01862e8d289e95158ac2548a82e010e21bbb5027afaadf1871d7672ef0291e79a057fbda9d335628b383fb915747369bccf4cfc4b3b07df2567ad8490c9f318378497e12fe302a1ca15e50ad950ce8a75b8174205001ccd58fb33cc9969ebcda1e7f60c119400ced3645c0386e068d9c5b6af332dbfb6d8767f3ed0f463c024b28ae0fafc03b425142364b7450991cd643e520ce7dc3a338103a9d00a342159bffa1910b37374a2e5c96ea386905a4a8a2a801c8645ef7e5cfe05fce31d77e5f73005a21b882f0583b36377b587c4b9f6f0cfe3d5a69301b213eaaf28f13478b536cf3661b4b07f19cb23c69b50825177378256e65005e572c1bab931506f86132524db560332b6948bf026039e26f9401721e1398366cb43dcc9ecb96565287969455c798aa9837c315bde9e4d10361c24b3495e62fd2a13eee65cd09b48d5aa97162c57f49a865e87fe8950136ccfa5d55c246924a1be07263ace2a7df5cfda5da25215373e17f1807bcd68bec2f53cc3889efe804860b3e91d629a37e9ca85601832a18420161e8b8d44d898e095d2037c7e65d0a6895c64472bbc5c42d954b87596a203fa6190ea7373ded4deb0629d430325067e4f9f524e0aea6b8f3466fc685ad7740ce46f1a65516b407f0ae492010eb868690fef0e370d4e99d522d52bd5977d09db0882348d6e3dace35bfb44749f0eb92a8493ade92332ddfcd9c68099a81bbb7bdefb0ab6e657b90455fe5863eb33d75fa575fc364e9e3257847ade12918711e627072ad314fc9d3804e99dfb06722d7e3117950b43b637834c33e545a77fc6248ed65a5cf65590ab066ab8645ed163a9cee402eb03c410951ce808ce2eae52760a6a2c7ee2ec2b7c277b9f601d4cc328b53567f36acffaa66d0abc71327233e2d398f3a222e71d91a699c25c537da953458dcc101e0ecba1282a79e49c617872709f317f108c8ae6c8816c0a8a96cec1536cd4a70cddbaa2809868a954a725c551b3eb55d4eb533544eb063f961a8e5c73539dfb69b52b752195c59d0d126c8d8d3343b57c16d06749612728bd73a73d6c0c3c1487925f06935604552802736c105e02417fb38d18870446ad1ffdfb29c8ccf0f799f3dfaf0b85f40a8f6352dce358e973fbc652fc5e854ac1f8381a23a83af1ca0c162115ed4ba8d45cbb329c880c4b6b96a448990a73c63c3bf785bba74081038e46c526ce3b8f83ca62142a3e5ae438ee91eb19e53419f9f7b2152dc9d7241938585153f580c0fbd9a7f646a4f6814691a7e030b291ce05df957f6e06b28f4072be2fe34c3dafeeb448183fb1dd7c5560317b8b470d769e4db1132679a6d9ff999e824ac12623ce1fc1d4d6b2d3d8a21fcba0bfef541107a7e4ef86894ac15df01cd52dbaa50348d11a3aa47b0ee0e2c3f2a5c15735024402edc8f5d9e17a7f71d859a9bc01e6bdcab17e18de467fafe36c710f7930a9178a3e80c2fb629c1d3bdb32b17f836c9174940aef98e3325262ea72ea83ad9702b2f7dc62cbe19ff6b2859b85c17a5ad23f021312b5dcc85ff7b8f98d0131b047d305e5b73025f56e9e74a1125f8b0d7e57e76354a6a207676b475b1b1516af6ac791b1b9a03a9122d720f97f94b356ab7119983c24e4ba3905c580663d937bc77df716276e49f1d4fcc93b2c64a7d76575a5c9fe34610f85a60369364e04a1fec017e1d713c4b8701980c698735fcba54ca0371d90a615ccebc51aa9b66086411ae2fa8a1c2ac733721a721dcaabc55379dbd7b32f7cecf4350dbe7bc77d0156b68a7d8022471efef18fa3cdebc1199ea57b5039951b608afbfcbf223b280c61448982c185a2fd8c8d9e1ef197d1ea0dbeaff3e276e6c870f89f0087ac85b302bc02f07e3336ee9c178e6f9470594aa4152f7559961fa70c0d82fcd4f6e8930855e63f7f2ee1e15ff256bf9cd31596d85a56620605327765121b8d282696382d7c53113c21a7a9a16b3af6669119112ede2a7e951289ae8ce92a1d47f4df754ee38b4d307726bec64f26eb7da1e667d882a0939e33a9b59889356235a02ae4035cfb51614eb5649ddc6b3a2771dd987c50d4422031f7fda711f49aabcc8d49b35761cdf0f4b4bf5e154d19002a775c5fe90139af70ad6168eb524b24af88a1a4e8f939ee75aebd6fb264e10aa9676bb59ececa2f6dae9c8f306d1afadb626f675fb8a1d9e07f1afa198e3780485ef62c23196045955e451d583e5e0e45b8d981e2ae367d2d4844b89dcdcccb3cafce941ce6a76b8d1419a29ebd4fb6c972ad4d81ee155f4b008f18e4673cb8e6dda66dc9c40f1dc5ae91c4cc735628cd7c3d1106db196d78a15fa33054dd0cbb9337bcc17742aa1f53fa0c8bee157a04281bd416ba8d3a86a270611284bfeeb24fb1b440f6adf31d4f86b68f48b3fcbf622e3ade7857c3c42908440d2a57b1c0ad994bfab05ff813462cdfd537764f3e1148500e129de26ac32ac4c80b642f6f1338badcff9df2e5befdc513a5a35693a64eda570f3897e962726e22268eafdc86fe174aa2e77e4f753463731bab3f0f5b662bdd80a5ddf4261ea60ff7059e4a9707ac0786c6327ff64c06cf3427fde0cea0010f2da38c606c91b727ca4c18aa1b1c536dba6155fa1a3c89c64c4984483df6852e8a76d9b29c130b32428b3b77e31152c8d217ba7abb9b8b15a38967e0e34efaf74c9584b0c33b1f62db64fe0ab789fbb10acd90543122483240dc79826e95e3bfb1e575d0fde0019aeb7295d34edc30f39c14234a3dbe8df40f69a6d75558079a8075dcd50e9f790d4ed58702463a7881407e6d064b8e2a6f9a527e5808db05af1bfc71afbce7880acb9e17685f30167a8cb7b06c194003fee55368fed4621c461a201519a4754cec0f23453cfb7ec17aeaad6c419f0afba3846c3edab09a4b129c142623a41300cead331d0ca7c7c7001fa0e7d5f1cd30aaaaa2c21b945a5f0dc587caf73f545143d83452754d2e891238cd2429d1c58d1962fefba14bbff54ca798e704a779feeeb756f2fba3e39543e8b9d4784f1b43785d3d569de74a610b7abbf82985a5b5095d23d1c6d70f721467822ae305d0834dc0d9bab6d4396ca9f787fad898f9b0160f0c09295102a2da672d7299faa07eceeaa24c08809c5e1f08eb6f23d956a2e520c840847dc321cba99e4b7b76c35bec637793034f674153aabdf70e55eebe8f3c970e018fb59c7ce1c60bc5a9c973762045923f742356c107b74e62ec7a5288bec415b8a098b312f40d4d54905b04859ffbe2a75b365d39c2be618559e30825fb463cdc740c950b6294276c4073f83844fc712e44f7d5d9adf20baaf0c6953c1eda11e5444f274eabb86d79f4f47806e73ed808b41775984ad0b696ac3ff7a3a802db829f62faa82415e86c390aed0a99e6664e51dfc115f9c6adfa96f52b4a7deb87fd959351f7d1ad2bfe658c64e9314b14a066d81e9fb7f3f29784ccf85d99e973d5c337a7271b4d72051512b00c5f8344471fd6212d4130d00ead05d2b15a162a3f29d3553036b3661acf546c467e88a923c378ca7e612e5f0ea68636375151724a8d3b285c113b122830ae20ff5ba6297ca773754e6257a709b5bb645ee8c628e10bb516e2e52b017c216a6e61e2659b6b10b8233398c0e24be41968435b270e28e1d3c7adb83fb4ad0384429278799e35b789aba0f7d443e453d88ec3c65c54c06e6b7252915e6e14fb04c57a8f77d8e6576095317ec0d201ef41e0773a2c6bc38775925035a7225591a7d38c1fd6ed8c1cea7596bc5a498c7f49d98a3da6f30e1618dfd0c6d19cafb7c79fd5fd4ff72c47f4a1277f9ca46b52c6c04d1d93c051ceffea475cec1dc46d01e65b5c858acf95b8744ecff242297f04016763527ef83ab52a09e725a91f29e07e3ffeb0a401898aeecfec3eecebb0746db96a405f7033458d31f09c1164df39c407011c085683f9d51fe40c13bb21f0c4200b64df7a7f4a5ddc6bd4e191ba347a4f0134cea97d69d42fde444edac2c45f8f2a22fa193e3283dcd1d43c591f4005cbbafe3a4d803327626baf4e1a9bc2038f39768b2dfb44068d6703a9edadc74ebf09689bc8e3c53c7a19dfb15a9f4d9d743e9530897f0a73894ecc15726ce3c780631cd3c709d4bf550ea72c7c3899cdded24cb35198b1e5d82ad3b68a0067821e76aed547f5ebf27dd2c28c9d664d03aea00f254b6b7f435cefed06a95fcaddb77bf59c7479348825281372ba0464b58e6e28081a229050a864a85e8b345c1e9b4dc990c0d7fbcb23c095103004553afc1b86ae4994db82c07d083d4278255d9f047ef0b65841d54525f3239621c7875de084f1db8e3b10e05d560128cdd1fd23a35fabef5090779f1d4be39e979ce5d4552b63e88cc29a1ae3345f1e3f3f0ace17d356bd81f8a0e50b30d2e2df5577571d3d48b788a89f48ad7dd77ec8ccb15f3562e322a1609268e51e1d5f99021637753249a78e0aa811951b5bd2c4fdbf7fe9ca004131a23e0c5a2108098bd53722a77145c59ac1826794c34420008b3c364870726adb3452edbc6eb80a629f2b587acb7f43a3783e83dc30e777922bb7932678f57cbc00b0c21db1fef5eb303207d3e7b913fa0b94bddc5a690"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000076e00)={0x1, [{}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "86d188768cfe1f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000077e00)={0x51, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1f, "ff9af079f94ff0"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000078e00)={{0x0, 0x3, 0x10000, 0x3, 0x5, 0xa255, 0x10000, 0xe8fa, 0x2, 0x4, 0xfffffc01, 0xffffffff80000001, 0x5, 0xeb, 0x6f5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000078ec0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000079ec0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "f5f17135f6463a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000007aec0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000007b0c0)={{0x0, 0x1, 0x3f, 0x6, 0x1, 0x5, 0x9, 0x5, 0x7, 0x7f, 0x1, 0x80000001, 0x7fff, 0x0, 0xffffffffffffd5f9}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000007b140)={0x0, 0x0, "d3d6fe93f8a502449b2ad06e8e6972beb61b50b42b695c61c88b75f5c00ce1482ed465b7e38190e75145fba70b7edc31fe729c0d7a11544d1feff24352634a61020fc408e951a3a4ab67b828108a14e5b2dcc30b364fef095b1201562cbd95d7b192cbc486b3ddbd69cfcfd016f6127435de968dcfeb9a1a5ece0a455aaa68f8405ff70ea4f5d145e095acfe8cbdd31120a8e636cbd9b21b34198bb52a8f4689cb2a89b5ec3333cafda8b2a28aed492e9d52a07cc3ee9d7959f91fb0c9d0d17431f5e4382df15d68fbdc9c920f65535b183e99914fb9bab7b3f5245d073956ea692eaaeeafcaff5f22a24524eebcec9dcc17a91eb2929cc24ce08ace562b9aa7", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000007c140)={{0x0, 0x200, 0x3, 0x0, 0xffff, 0x0, 0x852, 0x9, 0x16e6, 0x5, 0x6, 0x8, 0xeb6, 0x1, 0x1}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f000007c200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d200)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {r3}, {r4}, {r6}, {0x0, r7}, {r9}, {0x0, r14}, {}, {r16}, {r17}, {0x0, r20}, {r18}, {r21}, {}, {r22, r23}, {}, {}, {}, {}, {}, {r24, r25}], 0x5, "9bec8334e1243d"}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) 03:49:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:44 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:49:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'bridge0\x00', {0x2}, 0x8}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:49:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:44 executing program 4: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000180)) 03:49:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) 03:49:44 executing program 4: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="69687d01e16578aa08bf21235dd2bd2ee857275b89e25ed406161c3a40781877f22e146eb3c4d886c8799d39402b27390e09a1e92d30df333478cda4c0559d50d64227626b2e098d1f90e64a286ba466a66fede9743778d56a4cc4ebbe889d1e89434c5dd75e4238bbe9ec7421cfff46506e4fd1fe3b936c481f2d9b9ddc0df5d5b1182704af5b932040a0908f638e99fac6c6eedc", 0x95) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:49:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:45 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x3d, 0x4, 0x9) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) [ 2128.017454] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:49:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:54 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:49:54 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xb) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r9, r7) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {0x1, 0x5}, [{0x2, 0x7, r1}, {0x2, 0x1, r3}, {0x2, 0x5, r5}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4, 0xee01}], {0x4, 0x2}, [{0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x4, 0xee00}, {0x8, 0x4, r7}, {0x8, 0x0, 0xee00}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchdir(r0) ioctl$HCIINQUIRY(r10, 0x400448c9, 0x0) 03:49:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:49:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x7fff, "c5626c", 0x9, 0x22}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:49:54 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2"}, 0x5e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 03:49:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x18, 0x0, &(0x7f0000001180)) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x0, 0x0, 0x2}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:49:54 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1ff, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r4, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="fa", 0x80000}]) io_getevents(r6, 0xccdd, 0x1, &(0x7f0000000280)=[{}], &(0x7f00000002c0)={0x77359400}) io_submit(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x1, r2, &(0x7f0000000040)="edfbe5dc91ff375751865fea18da60ec12e5a41843fc79e666a9f99a549b2194fb760867198d899968c642a5c55f7ee1c13120d001be829a862efa56", 0x3c, 0x8a4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x9753, r3, &(0x7f00000000c0)="45a3d32658dac78ce6443a15cb468a4f010b0e0c0d7db1b957e20b40c180c3f80eb6437a686aa7402d14a84073b1ba461c0e791fe7a35ccbe6a2d885a21f264ff59913fe1909559ae0f452f98371a10ea633c48672a65d8964634ee02079b9040b91cbe02af64cfc331112385243f3ab5a8c57770031752cc655ce51c2b85eb4bcc87d3a2097bb6b81a2189b561508b309ffc187feab7be65c5cfecca45f1b2bef4d303fdacf15e0e208a14730091f0126b097ef113412f0f559223b9f0c3a28cef77dfd2e4e5b4f9db1444112e608a587b2044c69893c2c7df04bb304441b63492dc24378", 0xe5, 0x9, 0x0, 0x5, r4}]) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="0241fa2d3a1f0212c97e25b2370cc0f4187b6cc238590602fce47ce498db8f2248b1b2c6b7f0148e0f53caa69bf783bd85035f00"/69], 0x8, 0x3) ioctl$HCIINQUIRY(r7, 0x400448c9, 0x0) 03:49:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:54 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:49:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) 03:49:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0xd7f9, "100400", 0x8, 0xc0}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:49:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:55 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2137.701606] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2137.703296] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2137.704428] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2137.705510] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2137.706700] blk_print_req_error: 14 callbacks suppressed [ 2137.706717] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x4000 phys_seg 32 prio class 0 [ 2137.764618] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2137.766026] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2137.767062] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2137.768037] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 40 00 [ 2137.769135] I/O error, dev sr0, sector 256 op 0x0:(READ) flags 0x4000 phys_seg 17 prio class 0 [ 2137.807821] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2137.809292] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2137.810334] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2137.811348] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 80 00 00 40 00 [ 2137.812465] I/O error, dev sr0, sector 512 op 0x0:(READ) flags 0x4000 phys_seg 9 prio class 0 [ 2137.861165] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2137.862598] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2137.863645] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2137.864676] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 c0 00 00 40 00 [ 2137.865811] I/O error, dev sr0, sector 768 op 0x0:(READ) flags 0x0 phys_seg 12 prio class 0 03:49:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4161}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$TIOCEXCL(r1, 0x540c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:49:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:49:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x80, 0x1}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x10001, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x6, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000180)="c7f562ec4969c65a0a7745077dcaf1ad9f409e666b209660ea33f33620a9f441090b310635665e61645e25919214a1ead7c423ff2cc4ba31a47a6c45d5d047abe8702bfc76812e8f5e0a7e412e8fc0190beb5a831fb4ac0c83a2bde35dd80a") 03:49:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:49:55 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:49:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x6, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:49:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2"}, 0x5e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2138.376296] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2138.378188] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2138.379497] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2138.380530] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2138.381664] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x4000 phys_seg 32 prio class 0 [ 2138.406339] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2138.407423] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2138.408901] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2138.410179] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2138.411195] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 40 00 [ 2138.412331] I/O error, dev sr0, sector 256 op 0x0:(READ) flags 0x4000 phys_seg 17 prio class 0 [ 2138.417336] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2138.425080] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2138.425837] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2138.430329] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2138.442278] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2138.443709] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2138.444782] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2138.445798] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 80 00 00 40 00 [ 2138.446968] I/O error, dev sr0, sector 512 op 0x0:(READ) flags 0x4000 phys_seg 9 prio class 0 [ 2138.468237] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2138.469834] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2138.471135] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2138.472268] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 c0 00 00 40 00 [ 2138.473404] I/O error, dev sr0, sector 768 op 0x0:(READ) flags 0x0 phys_seg 12 prio class 0 03:50:05 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2"}, 0x5e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:05 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:50:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:50:05 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x841, 0x5) ioctl$CDROM_DEBUG(r0, 0x5330, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000040)={0x3, 0x8, 0xe9, &(0x7f00000000c0)=""/233}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) readahead(r3, 0x8, 0x2) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x7}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:50:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) close(r0) 03:50:05 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x8, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x348cdedeeaf31a0}, 0x6) 03:50:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:50:05 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:50:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x0) 03:50:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:05 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:50:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x0) 03:50:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2149.009635] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2149.021319] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2149.025274] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2149.026546] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:50:17 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:50:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x0) 03:50:17 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x10, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000180)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000000c0)="46c990bb8aff32409b29cd2f0051c7a900285d93bf7d1bf31850842c86944b577e4835c7d23869be9ab7f0b88402acd3ee6a92ba3d2fe4d5bf7d75057ae4e2c2aa654b060ca9a599eb3f9ad58a13411f3c288fcbbf7f58833600c955f3fcdf820d80f9688f865e5dd8c97054160445d7f4e0d7607d9c3b5c1101ba8bab002dd5f0") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101800, 0xd6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4c0000, 0x88) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0xc6, 0x9, 0x0, 0x8000, 0xbf, "b962263d8ebfebb64931a920be58cec300", 0x7ff, 0x102}) 03:50:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:17 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl(r1, 0x0, &(0x7f0000000000)="67eac7f1063bf497970b67ac75063baa649c08de9f7a15bea369b6c2c89b2615f8f75353326260c92bc5e470bd5996eac63afdebe35cd36c4ac682a8ba80513df63116249716cfb15715e6b881d7f8821ee344b1bce988d2c0377395160f7a02bae64c1c4c4a1a81b4e5aab7cfc1e4d0360fe6aae10380cb425e9185fc840c75101acdfa69166298f9e5369efdb0c5412f2ac12d1f2bbbffaa6cac8c97088c77ac2d369e105014482c7bb0e3637212628bfc78c0b823cad2d3277f628d9487bea00f56fbd32c999949012a862c10c620b54b8be31eff93fd3fa21a7a31bb883d65779792a4bc2cfaffbf700c279cbf0aff611121") r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x1, 0x80000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) write$bt_hci(r3, &(0x7f0000001240)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x5}}}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001180), &(0x7f00000011c0)=0xc) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000140)={0x0, "87c19caf42a5704a23fe2b88ebf638fc"}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000001140)={{r4}, {@val={r5}, @actul_num={@void, 0x6, 0x70}}}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001200)) close(r0) 03:50:17 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1ff, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r4, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="fa", 0x80000}]) io_getevents(r6, 0xccdd, 0x1, &(0x7f0000000280)=[{}], &(0x7f00000002c0)={0x77359400}) io_submit(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x1, r2, &(0x7f0000000040)="edfbe5dc91ff375751865fea18da60ec12e5a41843fc79e666a9f99a549b2194fb760867198d899968c642a5c55f7ee1c13120d001be829a862efa56", 0x3c, 0x8a4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x9753, r3, &(0x7f00000000c0)="45a3d32658dac78ce6443a15cb468a4f010b0e0c0d7db1b957e20b40c180c3f80eb6437a686aa7402d14a84073b1ba461c0e791fe7a35ccbe6a2d885a21f264ff59913fe1909559ae0f452f98371a10ea633c48672a65d8964634ee02079b9040b91cbe02af64cfc331112385243f3ab5a8c57770031752cc655ce51c2b85eb4bcc87d3a2097bb6b81a2189b561508b309ffc187feab7be65c5cfecca45f1b2bef4d303fdacf15e0e208a14730091f0126b097ef113412f0f559223b9f0c3a28cef77dfd2e4e5b4f9db1444112e608a587b2044c69893c2c7df04bb304441b63492dc24378", 0xe5, 0x9, 0x0, 0x5, r4}]) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="0241fa2d3a1f0212c97e25b2370cc0f4187b6cc238590602fce47ce498db8f2248b1b2c6b7f0148e0f53caa69bf783bd85035f00"/69], 0x8, 0x3) ioctl$HCIINQUIRY(r7, 0x400448c9, 0x0) 03:50:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x0, 0x1}}}, 0x7) 03:50:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) 03:50:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:50:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(0xffffffffffffffff) [ 2160.452131] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2160.453788] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2160.454961] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2160.456249] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2160.457474] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x4000 phys_seg 31 prio class 0 [ 2160.491491] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2160.493092] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2160.494236] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2160.495526] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 40 00 [ 2160.497102] I/O error, dev sr0, sector 256 op 0x0:(READ) flags 0x4000 phys_seg 32 prio class 0 [ 2160.515179] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2160.516711] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2160.518166] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2160.519340] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 80 00 00 40 00 [ 2160.520544] I/O error, dev sr0, sector 512 op 0x0:(READ) flags 0x4000 phys_seg 32 prio class 0 [ 2160.535095] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2160.537174] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2160.538319] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2160.539418] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 c0 00 00 40 00 [ 2160.540639] I/O error, dev sr0, sector 768 op 0x0:(READ) flags 0x0 phys_seg 32 prio class 0 [ 2161.009766] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2161.036648] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2161.039102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2161.040214] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2162.337036] Bluetooth: hci2: command 0x0406 tx timeout [ 2164.385007] Bluetooth: hci2: command 0x0406 tx timeout 03:50:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:29 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000580)={0x4, 0x80, 0x40, 0x0, 0x6, 0x0, 0x0, 0xd881, 0x200, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000003c0), 0x1}, 0x40800, 0x8, 0x2a2, 0x1, 0x100000001, 0x40, 0x46f, 0x0, 0x0, 0x0, 0x1}, r0, 0xb, r0, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x79d1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) r5 = openat(0xffffffffffffffff, &(0x7f00000017c0)='./file0\x00', 0x80, 0x1a4) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r6, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448c9, 0x0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r8, 0x0) io_submit(0x0, 0x8, &(0x7f0000002a40)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000002c0)="93b13b71fb95a2b20aadafc10f16778ccc3f35e17b05916b034cdff3e3d4c6191711751801eebeea867995c66ef7a41e8909f52b038468437e088198ff6f4f1f74c48ac2dd612b7673c1b44c22fad989622683b5e0b36f8a1895a5fde6961ac9a19b719c20a2b361bd93254c307c", 0x6e, 0x1, 0x0, 0x2, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x20, r1, &(0x7f0000000480)="0bd9304ae50483a1137bec7c35ef9f7b2966a3f69ad258bc067088d5af6bfe742d702b03c7b565f4aadca5c5a2670084975e1c5713d2cc02995218c91681bced5a7e6484b0e1e8fe16f03819fd1c953315db8b442865440816fa801267e5f298d0192d642848ca49b6155b520c10cd0433aae1b0ea648bf1408bd86bfd81b137c9887657f98a9136ee3042bb43abf1de4fdbe820930237999c38fd04d7348a4e97c87bfac9ddc369a2d899d7e5576629c2d7b14dcba5d7bd9950e6bd55ce234b401010eea51bc5606c10a47e24fe5bd95cf7daaa126b941131b1f67d", 0xdc, 0x0, 0x0, 0x0, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x8231, r2, &(0x7f0000000400)="0b29d2c751412013d089db43621c9e7d73f5d7d9c562636b3fc50300f1cc5839275df47f36", 0x25, 0x9d, 0x0, 0x2, r3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3, 0x3f, r0, &(0x7f0000000680)="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", 0x1000, 0x6e182aa6, 0x0, 0x2, r0}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x6, r4, &(0x7f0000001700)="9be06774e361f21fb090b88cef0efe7b0d5dda84b1618516ffaa437cb496b7f7829f436a957511ae53fe262d52557c014bdf3e7f1e8b9be02a336689b907968e731b88773b64b3d631248d714a8e8d2cec8ba9ea4a20c0a565ec1292732555ee53ff0af62b9f251d365a6fbc4b50579e9ffa61a228cf96ff71a1", 0x7a, 0x1, 0x0, 0x3, r0}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f0000001800)="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", 0x1000, 0xff, 0x0, 0x2, r6}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x3, 0xf60, r7, &(0x7f0000002840)="a95e48b85fd9029c729247bcaa38af953c36328a0621f696790bc2f11a1444ad26b483b5408b0135fc3a9fb00075fae09b80a0dec999f2b47e8099d82d7623dd686a4c036c9ac9a0b806f95b7cbe544f0a5c19551fd69ac58a5d0e6b1017a115e07394a81fe6227a5b708dbdb434705a826aaca13fb6226ed48114bf23e0fa4b", 0x80, 0x1, 0x0, 0x2, r8}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0xe, 0x9, r0, &(0x7f0000002900)="7e06e362e5693793f7def2d2e9d7305dd342897a70b4bf11dca5238b91234b6f884959002268debee82d69226c14de1248b29bb853d2a0ea396ee9d4e87fcda490ba51a5b8c35b6def261cff7b2b32836e421c6055df0cb94c834446b6367b1bbed6eb0d41bfc5a8b2083edad6998290253abd8d9f1c3d35b8b34f042e2fc598aa933592bceb0604c6219824d9aba16d3dacb5cc65c0064be6f166162a6e08ceba3799bb26429638078d1f969b041b22b9e1776fe36833d0f6ab26e5160b8947bc7ae6fce3fe45163760a7a26d34481eb9404b5d2cdc1d64f1b3c5255d0d51d09dd94d8e4c7f11bdfc2e7c87afdc5b48521d77895042b7505d", 0xf9, 0x6, 0x0, 0x3, r0}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x154, r9, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800000, 0x45}}}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x200, 0xb79, 0x80, 0x1000, 0x0, 0x0, 0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x344}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xed7a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xbd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x41c4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x63d4, 0x8, 0xd, 0x5, 0x3, 0x3ff, 0xfffffff9, 0x7]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xbc7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x325, 0xbdc, 0x4, 0x1, 0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8000, 0x7, 0x8c8, 0x0, 0x9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4f7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x101}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:50:29 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:50:29 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x8, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4161}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) ioctl$TIOCEXCL(r1, 0x540c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:50:29 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:29 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x6a, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:29 executing program 4: sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xf}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000000c0)="46689ae4a4050c4fa22639e48c807a8d600f998cbd76ccea19264f37ef6cda490afba6288ce672205426e285b719083474caadc0beda1f2c60e3c423028139b7381ef9bd2ffe2c6b172fe19df1d4170314f2ce09e8cdef36df780d247768e7a17ebc2cc2231fcf49e0c2021ff1c663cb4eec90e44556106e3883d438b86e7adcf791f0c0ab424ef58a1e76eda4a3689172a00a9bb5c6f419b9b80266cbc6747cbe33211d4a7960a169") setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='xfrm0\x00') 03:50:29 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x75, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:29 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2172.683465] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:50:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x8001, 0x0, 0x80000000, 0xa11, 0x7f, "a4d255ab54b44ba6865dcae7a93ac9d484e367", 0x81, 0x85}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8) 03:50:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x8b, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) 03:50:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001300)={0x1f, 0x2, 0x1}, 0x6) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = signalfd(r1, &(0x7f0000001340)={[0xffff]}, 0x8) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000300)={{r0}, "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"}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000024) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x25) getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x7, 0xc1, "a1e5c3c7f3bff08f4f1acb7f516c1a1f69ba9553a418b15344a0efbcf35e65fc9681373e15cc3147ca84a9c816a503e80b96373f489c16af371703022078ce", 0x1c}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="2ea054a6c3c87e4b804a9f9220b66172d4b49e3b77cead409fc4c918172f39c08bd057a098f70e60724d189dba5af017e98da9d80fa970893c90bf655275868f8bea9f6a90efd51ed6d825fbc94c9973c3bc75333acbc1c361513856af995417ee3b12052703373ad8e9074bd13eed9651207a67cb130ec0de98c54c6fca33617e104e07a04754d8233e503dbc85afbbe37e88cac4002a30e3821d587ec1c90058d3a9f7b19a577a2a5103a5", 0xac}], 0x1}, 0x20000000) 03:50:40 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:50:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="05000000000000008b69c4ce2e2f6669"]) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xb12, 0x4, 0x0, 0xff, 0x14}}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0xffffffffffffffff, 0x5, '\x00', 0x3, 0xfe}) 03:50:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x1}}}, 0x7) 03:50:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 1) 03:50:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x96, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2182.651177] FAULT_INJECTION: forcing a failure. [ 2182.651177] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.652172] CPU: 1 UID: 0 PID: 19206 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2182.652188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2182.652196] Call Trace: [ 2182.652200] [ 2182.652205] dump_stack_lvl+0xfa/0x120 [ 2182.652229] should_fail_ex+0x4d7/0x5e0 [ 2182.652253] should_failslab+0xc2/0x120 [ 2182.652269] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 2182.652288] ? lock_release+0xc8/0x290 [ 2182.652302] ? __alloc_skb+0x2ab/0x370 [ 2182.652318] __alloc_skb+0x2ab/0x370 [ 2182.652329] ? __pfx___alloc_skb+0x10/0x10 [ 2182.652348] alloc_skb_with_frags+0x8f/0x7c0 [ 2182.652364] ? __pfx_perf_trace_lock+0x10/0x10 [ 2182.652381] sock_alloc_send_pskb+0x7e5/0x960 [ 2182.652392] ? lock_acquire+0x15e/0x2f0 [ 2182.652404] ? avc_has_perm_noaudit+0x59/0x3d0 [ 2182.652425] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 2182.652445] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2182.652457] ? avc_has_perm_noaudit+0x150/0x3d0 03:50:40 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2182.652477] ? sock_has_perm+0x21d/0x2b0 [ 2182.652495] ? __pfx_sock_has_perm+0x10/0x10 [ 2182.652516] hci_sock_sendmsg+0x190/0x2270 [ 2182.652531] ? perf_trace_lock+0xb5/0x5d0 [ 2182.652546] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2182.652565] sock_write_iter+0x51d/0x5c0 [ 2182.652582] ? __pfx_sock_write_iter+0x10/0x10 [ 2182.652606] ? security_file_permission+0x22/0x90 [ 2182.652628] vfs_write+0xbe9/0x10c0 [ 2182.652642] ? __pfx_sock_write_iter+0x10/0x10 [ 2182.652657] ? __fget_files+0x34/0x3b0 [ 2182.652676] ? __pfx_vfs_write+0x10/0x10 [ 2182.652700] ksys_write+0x1ef/0x240 [ 2182.652711] ? __pfx_ksys_write+0x10/0x10 [ 2182.652728] do_syscall_64+0xbf/0x360 [ 2182.652747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.652760] RIP: 0033:0x7f94c0522b19 [ 2182.652769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2182.652781] RSP: 002b:00007f94bda98188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2182.652792] RAX: ffffffffffffffda RBX: 00007f94c0635f60 RCX: 00007f94c0522b19 [ 2182.652801] RDX: 0000000000000007 RSI: 00000000200000c0 RDI: 0000000000000004 03:50:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x6, 0xffffffff, 0x1, 0x6, 0x2, [{0xfff, 0x7, 0x2, '\x00', 0x2}, {0x1, 0xfffffffffffffc01, 0xffff, '\x00', 0x800}]}) [ 2182.652808] RBP: 00007f94bda981d0 R08: 0000000000000000 R09: 0000000000000000 [ 2182.652815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2182.652822] R13: 00007ffc7137c19f R14: 00007f94bda98300 R15: 0000000000022000 [ 2182.652839] 03:50:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 2) 03:50:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2183.408842] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2183.418448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2184.673005] Bluetooth: hci2: command 0x0406 tx timeout [ 2186.593090] Bluetooth: hci1: command 0x0406 tx timeout [ 2186.720969] Bluetooth: hci2: command 0x0406 tx timeout 03:50:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000040)="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") 03:50:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0xffff}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) syz_io_uring_setup(0x6bff, &(0x7f00000000c0)={0x0, 0x9712, 0x10, 0x0, 0xb7, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xdd4, 0x0, &(0x7f0000000180)="7387b12418a31f4f16e495168b044f590dcd3b7803cbc40ad840315cc121afb25104a0860c94ec5186af3640f9bb034153730d42813c65e642cf7e91b5dc4b39fd7730818c428575981ee7a52709597f99e7b4d400061bf11864779feb89df718dc113ba523643f13645645c244328e5f31537ca7230b42e46002499739bf5aa774581b53a1bab6519eb9a65e8736541f6422052faabcdf9aab86e8dbe32e0d3fe1738b8e0b06b4d7f68d09c9b0aaabe0401b0b2bb5087af68ed", 0x1, 0x0, 0x1, {0x3}}, 0xdf) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:50:50 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:50:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) (fail_nth: 1) 03:50:50 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xa1, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 3) 03:50:50 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2192.590695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.591601] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.592598] FAULT_INJECTION: forcing a failure. [ 2192.592598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2192.592767] buffer_io_error: 14 callbacks suppressed [ 2192.592786] Buffer I/O error on dev sr0, logical block 0, async page read [ 2192.594401] CPU: 1 UID: 0 PID: 19239 Comm: syz-executor.2 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2192.594431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2192.594444] Call Trace: [ 2192.594452] [ 2192.594461] dump_stack_lvl+0xfa/0x120 [ 2192.594499] should_fail_ex+0x4d7/0x5e0 [ 2192.594540] _copy_to_user+0x32/0xd0 [ 2192.594567] simple_read_from_buffer+0xe0/0x180 [ 2192.594603] proc_fail_nth_read+0x18a/0x240 [ 2192.594629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2192.594653] ? security_file_permission+0x22/0x90 [ 2192.594688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2192.594711] vfs_read+0x1eb/0xbe0 [ 2192.594739] ? __pfx_vfs_read+0x10/0x10 [ 2192.594762] ? lock_release+0xc8/0x290 [ 2192.594793] ? __fget_files+0x20d/0x3b0 [ 2192.594840] ksys_read+0x121/0x240 [ 2192.594860] ? __pfx_ksys_read+0x10/0x10 [ 2192.594892] do_syscall_64+0xbf/0x360 [ 2192.594934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.594957] RIP: 0033:0x7f374040469c [ 2192.594975] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2192.594995] RSP: 002b:00007f373d9c7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2192.595016] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f374040469c [ 2192.595031] RDX: 000000000000000f RSI: 00007f373d9c71e0 RDI: 0000000000000004 [ 2192.595044] RBP: 00007f373d9c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2192.595058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2192.595070] R13: 00007ffd3787b54f R14: 00007f373d9c7300 R15: 0000000000022000 [ 2192.595103] 03:50:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) [ 2192.671698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.672886] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.674246] Buffer I/O error on dev sr0, logical block 1, async page read 03:50:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:50:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x800, 0x1, 0x6, 0x2, 0x5, 0x9}}}, 0x12) [ 2192.705275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.706161] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.707387] Buffer I/O error on dev sr0, logical block 2, async page read [ 2192.728189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.729050] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.733082] Buffer I/O error on dev sr0, logical block 3, async page read [ 2192.745336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.746584] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.748105] Buffer I/O error on dev sr0, logical block 4, async page read [ 2192.761488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:50:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 03:50:50 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2192.762578] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.764512] Buffer I/O error on dev sr0, logical block 5, async page read [ 2192.776244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.777078] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.778219] Buffer I/O error on dev sr0, logical block 6, async page read [ 2192.780323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.781115] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.782252] Buffer I/O error on dev sr0, logical block 7, async page read [ 2192.784081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.784895] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.786186] Buffer I/O error on dev sr0, logical block 0, async page read [ 2192.787799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.788629] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2192.789744] Buffer I/O error on dev sr0, logical block 1, async page read 03:50:50 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xac, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2192.791521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.794378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.795885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.797503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.798820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.800362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.801521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.803069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.804760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.805837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.808521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.809627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.811143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.812887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:50:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 4) [ 2192.871829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.873013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.876106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.880585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.889752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.897304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.903795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2192.907497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:50:50 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:50:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@any, "c5e952d41333a2d401807772d7a0d647", "f5805366001dc8b6ae6c98c7b8c180ce"}}}, 0x2a) 03:50:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x2, 0x1000, 0x8001, 0x6, 0x101, 0x2}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDENABIO(r0, 0x4b36) 03:50:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2195.040976] Bluetooth: hci2: command 0x0406 tx timeout 03:51:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000080)={0xf}) 03:51:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:01 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/157) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) tee(0xffffffffffffffff, r2, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:51:01 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 5) 03:51:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xb7, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000080)={0xf}) [ 2204.480824] FAULT_INJECTION: forcing a failure. [ 2204.480824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2204.482599] CPU: 0 UID: 0 PID: 19292 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2204.482629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.482641] Call Trace: [ 2204.482649] [ 2204.482658] dump_stack_lvl+0xfa/0x120 [ 2204.482696] should_fail_ex+0x4d7/0x5e0 [ 2204.482737] _copy_from_iter+0x1dc/0x15b0 [ 2204.482762] ? lock_acquire+0x15e/0x2f0 [ 2204.482788] ? __virt_addr_valid+0x1c6/0x5d0 [ 2204.482822] ? find_held_lock+0x2b/0x80 [ 2204.482856] ? __pfx__copy_from_iter+0x10/0x10 [ 2204.482876] ? lock_release+0xc8/0x290 [ 2204.482912] ? __virt_addr_valid+0x100/0x5d0 03:51:02 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2204.482946] ? __check_object_size+0x57b/0x880 [ 2204.482985] hci_sock_sendmsg+0x402/0x2270 [ 2204.483017] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2204.483052] sock_write_iter+0x51d/0x5c0 [ 2204.483085] ? __pfx_sock_write_iter+0x10/0x10 [ 2204.483130] ? security_file_permission+0x22/0x90 [ 2204.483170] vfs_write+0xbe9/0x10c0 [ 2204.483193] ? __pfx_sock_write_iter+0x10/0x10 [ 2204.483222] ? __fget_files+0x34/0x3b0 [ 2204.483257] ? __pfx_vfs_write+0x10/0x10 [ 2204.483301] ksys_write+0x1ef/0x240 [ 2204.483322] ? __pfx_ksys_write+0x10/0x10 [ 2204.483354] do_syscall_64+0xbf/0x360 [ 2204.483389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.483412] RIP: 0033:0x7f94c0522b19 [ 2204.483429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.483450] RSP: 002b:00007f94bda98188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2204.483471] RAX: ffffffffffffffda RBX: 00007f94c0635f60 RCX: 00007f94c0522b19 [ 2204.483486] RDX: 0000000000000007 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2204.483499] RBP: 00007f94bda981d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.483513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2204.483526] R13: 00007ffc7137c19f R14: 00007f94bda98300 R15: 0000000000022000 [ 2204.483558] 03:51:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000080)={0xf}) 03:51:02 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000080)={0xf}) 03:51:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 6) [ 2204.666749] FAULT_INJECTION: forcing a failure. [ 2204.666749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2204.667834] CPU: 1 UID: 0 PID: 19309 Comm: syz-executor.1 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2204.667851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.667862] Call Trace: [ 2204.667869] [ 2204.667874] dump_stack_lvl+0xfa/0x120 [ 2204.667909] should_fail_ex+0x4d7/0x5e0 [ 2204.667946] _copy_to_user+0x32/0xd0 [ 2204.667967] simple_read_from_buffer+0xe0/0x180 [ 2204.667997] proc_fail_nth_read+0x18a/0x240 [ 2204.668022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2204.668041] ? security_file_permission+0x22/0x90 [ 2204.668077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2204.668103] vfs_read+0x1eb/0xbe0 [ 2204.668126] ? __pfx_vfs_read+0x10/0x10 [ 2204.668147] ? lock_release+0xc8/0x290 [ 2204.668176] ? __fget_files+0x20d/0x3b0 [ 2204.668209] ksys_read+0x121/0x240 [ 2204.668233] ? __pfx_ksys_read+0x10/0x10 [ 2204.668260] do_syscall_64+0xbf/0x360 [ 2204.668292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.668313] RIP: 0033:0x7f94c04d569c [ 2204.668330] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2204.668358] RSP: 002b:00007f94bda98170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2204.668379] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f94c04d569c [ 2204.668389] RDX: 000000000000000f RSI: 00007f94bda981e0 RDI: 0000000000000003 [ 2204.668402] RBP: 00007f94bda981d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.668412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2204.668422] R13: 00007ffc7137c19f R14: 00007f94bda98300 R15: 0000000000022000 [ 2204.668447] [ 2205.317218] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2205.318581] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2206.689970] Bluetooth: hci2: command 0x0406 tx timeout 03:51:13 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0xd0, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7b25}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}]}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x51}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8833}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0xb522156fa0d9d008) write$nbd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="674466980100000001000100040000007c108fc8954226d8d57679c8fc159a535c1654bf7beba36b81d1bd9ed5bcd4fa0304320bbee9449ff10c3378cc5ab1246b7eec5464669992491115dc4360e00409fa7230d07f41bc2b9c1d45c3b468e87e3fd31c0ce1060000006834b1f48e11042927a496719214ed69b3d855b9551db9ce23893cfc41bd45f9a0aa8331b3e121f2af5d70eb5c91bc207212ece4261a2f432dedd85d111ddb727ce2a5af11942af3c1306205b653b2e7cbd67ad0dce6282d4f59a3551e48f4d7019439f3e2c66fdb63fff1ce00000000000000bce5a14e4755023aa7"], 0xc8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0xfff, 0x0, 0xfffc}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$nbd(r3, &(0x7f0000000200)={0x67446698, 0x0, 0x2, 0x5, 0x3, "11ba0f2a433bdff3ba6d507271aa1149b8eb71ea388114fc987bfac626790249ad4fa785fdc1f5cbce6757b1cb3670e4208f5f69093693317ae921aa2827beca7cb42c996da81a6ba00ce96b2b8ccbc50305a9369e7cbc90a37b8d5fe4bd4623739bb0f63bb3466412921c4eb41040f24833ca247601ad35c2ae8a1aa8a546b96e66edcf5a4f5919de7fd3158893a40057a52d72fed6793fcc88a914b0e3b8f66d49f9a18ea97ad738f68214a9592e89cc18f726a048a6"}, 0xc7) 03:51:13 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xc2, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:13 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000080)={0xf}) 03:51:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:51:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:13 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="f5ff200000000004dd9527dc33933daedff462da0328d0f540e030a149eab4938bdb7524cbaf067a19ab054844260b2ff57d3215d5bef10c5fb15b3c03ff713d2431f8c9198725715cb237e8164fcb1d71475c02d9c52cf0c52857b5a66654"]) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000072880)={{0x0, 0x0, 0x5, 0x7, 0xc22, 0x8, 0x2, 0x0, 0x1, 0x3, 0x8, 0x7, 0x80, 0x4, 0x1f}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000072940)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf1, "a31a9a2ea3554e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000073940)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000074940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000074b40)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000074d40)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5f, "f4a23820cdb1a2"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000075d40)={0x0, 0x0, "41a6e594aeda6e94412cb775175bc6f8e5351272bb77d3106c5a68c50706a08c83c1057ee6e405062b26d12aa4c0ab2e4d9a844440a6fe382f0af60ee7218d07b22f736fb4bc9790142f30f6c7ae6117d804f60a21399b73a0952625c0e7a9c3c6dd70a22103e68996d77dcf65a87bfc5364a88ee1f6968b52ecd7f5af0e471d83687d4eb620ff4379c45eb59a9a197cda1f69d801c39ad335ff15b5e5a17ce53071933bc424da8fcb4715cc6ff8ef98cf4967b3639b2a84541a7f9dd522567bf5a8467a89a2b6aece8987c3f77624a1aecb1f670e9836dbefdf56f398681727854ee33300dbad33edf5b31af735c48b09a5fa2e7035d725f6da171111f63d42", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000076d40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000076f40)={{0x0, 0x6, 0xa2e, 0x1000, 0x4b13, 0xfffffffffffffffa, 0x0, 0x46b, 0x0, 0x9, 0x8, 0x7, 0x6, 0x0, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000077f40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000078140)={{0x0, 0x4, 0x100, 0x8, 0xc483, 0x100, 0x81, 0x4, 0xbb, 0xffffff7f, 0x8, 0x1ff, 0x9, 0xacbf, 0x40}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000079140)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000079340)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "e6221bbc43607a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000007a340)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007a540)={0x70, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {r4, r5}, {}, {r6}, {0x0, r7}, {}, {}, {}, {0x0, r8}, {}, {}, {0x0, r9}, {r10, r11}, {r12}, {0x0, r13}, {0x0, r14}, {0x0, r15}], 0xf9, "8b14550f1914fb"}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x2, 0x1, "eb3f5e", 0x62, 0x7}) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000040)="70580a5a0622e465d1b2b8db8b03c7b250646e7c865fd85e17103cfee527a10421ee3557ba3e5013af035f6001c7de123ed7b0db5a4404e98fad40ae446cf267d692c31d02e335e49913b5c5b686faad03c999d1a63f8ab39c578ff9cfc0114e81b5628f256517dbea270729f480b087b9455b1795f7") 03:51:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000080)={0xf}) 03:51:13 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2217.697029] Bluetooth: hci2: command 0x0406 tx timeout 03:51:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0xff}}}, 0x5) 03:51:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000080)={0xf}) 03:51:25 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x2, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:51:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x7fff}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:51:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xcd, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:25 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000080)={0xf}) 03:51:25 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x78, r0, {0x3}}, './file0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x7fffffff}, 0x100, './file0\x00'}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x24, 0x4, 0x9}}}, 0x7) recvmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/125, 0x7d}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/129, 0x81}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000002580)=""/6, 0x6}], 0x7}, 0x2}, {{&(0x7f0000002640)=@isdn, 0x80, &(0x7f0000003c00)=[{&(0x7f00000026c0)=""/138, 0x8a}, {&(0x7f0000002780)=""/174, 0xae}, {&(0x7f0000002840)=""/84, 0x54}, {&(0x7f00000028c0)=""/208, 0xd0}, {&(0x7f00000029c0)=""/78, 0x4e}, {&(0x7f0000002a40)=""/142, 0x8e}, {&(0x7f0000002b00)=""/88, 0x58}, {&(0x7f0000002b80)=""/102, 0x66}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x9, &(0x7f0000003cc0)=""/133, 0x85}, 0x7ff}, {{&(0x7f0000003d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003e00)=""/4096, 0x1000}], 0x1, &(0x7f0000004e40)=""/84, 0x54}, 0x80000000}], 0x3, 0x10000, &(0x7f0000004f80)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:51:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000180)="f0ec87e91eeb2bbcf0ac368994b8305dcf90162cea64a4e785961883f4d3ecea13aa9cd750099a096b0deeb5825317efd7c1b68dbf73eb5b995cddb3c4c1ed9e8fad5b9c3089f8d9e12d04c8d69b403cfb3e7a56e035ab5f1b3357bbe24db9605cba1bd475c31ef27d73b4b5deb651cc0e75b3dd2462229b9120d9937c60257741537423ffba8e7d3af386bce3e5f26fdd9da8a11459631319669794f08fef132e7fc0bf1d23ca6334ab0f6c0ea1a5cd4f") clock_gettime(0x0, &(0x7f0000005e00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/82, 0x52}], 0x5, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000000840)=""/51, 0x33}, {&(0x7f0000000880)=""/251, 0xfb}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f0000000a80)=""/160, 0xa0}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000d80)=""/6, 0x6}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/255, 0xff}, {&(0x7f0000001f00)=""/1, 0x1}, {&(0x7f0000001f40)=""/21, 0x15}], 0x6, &(0x7f0000005e80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000005000000000100000001d3ac6700"/33, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xa0}}, {{&(0x7f00000020c0), 0x6e, &(0x7f00000032c0)=[{&(0x7f0000002140)=""/10, 0xa}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)}, {&(0x7f00000031c0)=""/129, 0x81}, {&(0x7f0000003280)=""/21, 0x15}], 0x5}}, {{&(0x7f0000003340), 0x6e, &(0x7f0000004680)=[{&(0x7f00000033c0)=""/163, 0xa3}, {&(0x7f0000003480)=""/253, 0xfd}, {&(0x7f0000003580)=""/169, 0xa9}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/58, 0x3a}], 0x5, &(0x7f0000004700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000080"], 0xb0}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004840)=""/153, 0x99}, {&(0x7f0000004900)=""/226, 0xe2}, {&(0x7f0000004a00)=""/6, 0x6}, {&(0x7f0000004a40)=""/243, 0xf3}], 0x4, &(0x7f0000004b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000004bc0)=""/61, 0x3d}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2}}], 0x7, 0x40000040, &(0x7f0000005e40)={r2, r3+10000000}) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x80800) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) 03:51:25 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:51:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xd8, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1000, 0x7ff}}, './file0\x00'}) ioctl$FIOCLEX(r3, 0x5451) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)="4f271ab49755647df0f1aa6e954378aaafa27f8805db969417ce1469be5f06df2c10b02a5a5ab6f2a5c1298ea583b62e136bab26dafb6f96a812eb28d277958fd9accf19e23a397d9be170b9ef50c919f3172de64b75331be624d98684c807ad9544002b52cf2adf26f4") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:51:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000080)={0xf}) 03:51:25 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfff7, 0xfffd, 0x1000, 0x200, 0x10}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$KDENABIO(r1, 0x4b36) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:51:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xe3, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x7, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:51:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000080)={0xf}) 03:51:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0xa003, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:51:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:37 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x108, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000004) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) write$bt_hci(r2, &(0x7f0000000180)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc9, 0x1f}}}, 0x8) 03:51:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xee, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:37 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/platform', 0x40, 0x2) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000002440)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000140)=""/103, 0x67}], 0x2, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)=""/155, 0x9b}], 0x1, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000580)=""/125, 0x7d}, {&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f0000000780)=""/77, 0x4d}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001900)=""/232, 0xe8}, {&(0x7f0000001a00)=""/56, 0x38}, {&(0x7f0000001a40)=""/33, 0x21}, {&(0x7f0000001a80)=""/232, 0xe8}, {&(0x7f0000001b80)=""/74, 0x4a}, {&(0x7f0000001c00)=""/249, 0xf9}, {&(0x7f0000001d00)=""/186, 0xba}], 0x7, &(0x7f0000001e40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001f40), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001fc0)=""/72, 0x48}, {&(0x7f0000002040)=""/142, 0x8e}, {&(0x7f0000002100)=""/52, 0x34}, {&(0x7f0000002140)=""/88, 0x58}, {&(0x7f00000021c0)=""/4, 0x4}, {&(0x7f0000002200)=""/214, 0xd6}, {&(0x7f0000002300)=""/143, 0x8f}], 0x7}}], 0x5, 0x2040, &(0x7f00000025c0)={r1, r2+60000000}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) dup2(r5, r4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000002600)={0x1, 0x1d24, "734ad8", 0x7, 0x81}) 03:51:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x5}}}, 0x7) 03:51:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000080)={0xf}) 03:51:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xf9, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:38 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) close(r1) 03:51:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:51:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x102, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000080)={0xf}) 03:51:38 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2241.059436] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2242.337069] Bluetooth: hci2: command 0x0406 tx timeout [ 2244.385032] Bluetooth: hci2: command 0x0406 tx timeout [ 2246.432999] Bluetooth: hci2: command 0x0406 tx timeout 03:51:49 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20395046d6000000", @ANYRES16=r0, @ANYBLOB="000125bd7000ffdbdf25340000000600fd000f50000008001f014ccf0000"], 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r0, 0x1, 0x4, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2d}}}}, [@NL80211_ATTR_FRAME_MATCH={0x8a, 0x5b, "3e0ee2b9a42af6418442521a7431eddc33b929b0f989e286e2b4fc0f86a4f873fda36c04447ce0ed58fef5783e1d70562b5c2701a72237f8180df71cf142ddbf11b197b91e593dea351e417f6db3ffa0d443740f8f0ce0c29b767bc9968471df1c053f3b8c328728cdf8fd9cd67f8a3ff55c07f5cf2146a8e6698f96c550037f3245e97a74eb"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff}]}, 0xb4}}, 0x20000000) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:51:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:51:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x1) ioctl$KDSETLED(r2, 0x4b32, 0x80000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:51:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x2}}}, 0x7) 03:51:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x104, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:51:49 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:51:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000080)={0xf}) 03:51:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2252.455487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.456422] blk_print_req_error: 22 callbacks suppressed [ 2252.456438] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.458705] buffer_io_error: 22 callbacks suppressed [ 2252.458720] Buffer I/O error on dev sr0, logical block 0, async page read 03:51:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000080)={0xf}) 03:51:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2252.494967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.495843] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.497510] Buffer I/O error on dev sr0, logical block 1, async page read [ 2252.518404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.519731] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.521372] Buffer I/O error on dev sr0, logical block 2, async page read [ 2252.540736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.541624] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.542860] Buffer I/O error on dev sr0, logical block 3, async page read [ 2252.559187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.560276] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.561644] Buffer I/O error on dev sr0, logical block 4, async page read [ 2252.572507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.573460] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.574683] Buffer I/O error on dev sr0, logical block 5, async page read [ 2252.586239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.587127] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.588357] Buffer I/O error on dev sr0, logical block 6, async page read [ 2252.602115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.603001] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.604223] Buffer I/O error on dev sr0, logical block 7, async page read [ 2252.619391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.620246] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.621486] Buffer I/O error on dev sr0, logical block 0, async page read [ 2252.640143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.641380] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.642780] Buffer I/O error on dev sr0, logical block 1, async page read [ 2252.655248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.662656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.667369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.672310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.678317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.683142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.684473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.688414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.699290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.705129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.709291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.717358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.721262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.724122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.725610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.727764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.729858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.734449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.744328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.750310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.754337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.758131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.759489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.761867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.765701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.770513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.775723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.782007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.785742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.791058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.792482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.793651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.795487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.796685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.798681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.800515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.801847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.803748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.877246] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2252.878682] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2252.879718] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2252.880713] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2252.883430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.885298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.887453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.888750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.890434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.892483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.893775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.895519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.897037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.898662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.900203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.902191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.903391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.905342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.906574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2252.908381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2254.433045] Bluetooth: hci2: command 0x0406 tx timeout [ 2256.481026] Bluetooth: hci2: command 0x0406 tx timeout 03:52:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0xfffffff8, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040)=0x8, 0x4) 03:52:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x400}}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x2, "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"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={r0, 0x9, 0x1, 0xe10}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000440)={0x0, 0x101, 0x9, 0x1, 0x5, "917c79270a7cafb14835a5845ce98ede0cf1ec", 0x3ca, 0x9}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300)="eda3f417191cabee5a49fc985c5004bc8b3ce6dc691628a8deddcaad2fda91f1f5650cf6f2c3cc6f07e77069910b38182d5da8310e0b7c14a7042a9fe691c1e2d796361eab6c97db61d682508b0bbf0c6ea448dd9c21ebd90fb494f8eb8aeda848f0400044c55ef83f03678bb8f2f9db4b49dcc262082bcf375cbef3dea0c3a647def5e53e338707e966913ed0cf3f0ec199793f5d3300527904bd0811c9b5a186d9489b9508229f78a0ed9b284041ed71ededa7436551e14af7c68e14528c8f3bf994ec89984649f54aa7503ff7582a13762228c268b2", 0xd7, r2}, 0x68) 03:52:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x4}}}, 0x7) 03:52:01 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x10f, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000080)={0xf}) 03:52:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000080)={0xf}) 03:52:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @inquiry={{0x401, 0x5}, {"32f590", 0x5, 0x2}}}, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) dup(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000006380)=[{{&(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/243, 0xf3}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x8, &(0x7f0000002600)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000002640)=""/155, 0x9b}, {&(0x7f0000002700)=""/140, 0x8c}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003800)=""/64, 0x40}], 0x1, &(0x7f0000003880)=""/147, 0x93}, 0xfffffffd}, {{&(0x7f0000003940)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005d00)=[{&(0x7f00000039c0)=""/67, 0x43}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/228, 0xe4}, {&(0x7f0000004b40)=""/15, 0xf}, {&(0x7f0000004b80)=""/90, 0x5a}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/97, 0x61}, {&(0x7f0000005c80)=""/21, 0x15}, {&(0x7f0000005cc0)=""/57, 0x39}], 0x9, &(0x7f0000005dc0)=""/188, 0xbc}, 0x8}, {{&(0x7f0000005e80)=@xdp, 0x80, &(0x7f0000006040)=[{&(0x7f0000005f00)=""/99, 0x63}, {&(0x7f0000005f80)=""/145, 0x91}], 0x2, &(0x7f0000006080)=""/28, 0x1c}, 0x4c07}, {{0x0, 0x0, &(0x7f00000060c0), 0x0, &(0x7f0000006100)=""/132, 0x84}, 0x40}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f00000061c0)=""/217, 0xd9}, {&(0x7f00000062c0)=""/14, 0xe}], 0x2, &(0x7f0000006340)=""/62, 0x3e}, 0x1000}], 0x7, 0x10080, &(0x7f0000006540)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:52:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000080)={0xf}) 03:52:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x6}}}, 0x7) 03:52:01 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000080)={0xf}) [ 2264.560360] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2265.761047] Bluetooth: hci2: command 0x0406 tx timeout [ 2267.808984] Bluetooth: hci2: command 0x0406 tx timeout [ 2269.857073] Bluetooth: hci2: command 0x0406 tx timeout 03:52:12 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x11a, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf70, 0x0, 0x0, 0x4, 0x3}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:52:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:12 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002140), 0x20201) pread64(r0, &(0x7f0000002180)=""/30, 0x1e, 0x563d) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd86eecb7ad9bf4a6}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x100, 0x70bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8060}, 0x48000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "e2818e77534808ba918f6402e1ce8db8c41242b0036a280fe031bfec6f4f31bf3126603a2dcd583590d822e82efe2885a7e64e8c68930d80b978b9bb76d87ff2ad991a320e46c00183c8a65c79c2ce7e9ba7ad9704f512ae042b739009b87dea71bca197214ff4770650532bef8a377e773fecd2152135b600cc916b691ceebb812ea65e36da028ca380a20335c176dd5e7a90437169bc27b7a2e880885588047ee499896c77461153bc6e9a493629f8b03304fe8f1fbc555903957c166cb1d044823e98288262e96d45d21d8dfe0cce4ec15dec8e882515a7bc367bb817f610d7791c3c832fa863c794c316aee16cf120262d765c5ea420751ab413a2436311", "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"}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) write$bt_hci(r4, &(0x7f00000021c0)={0x1, @sniff_subrate={{0x811, 0x8}, {0xac, 0x4, 0x4, 0x6}}}, 0xc) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001140)={{r3, 0xffffffff00000001, 0x0, 0x7, 0x4, 0xa4e, 0x0, 0x40, 0x5, 0x81a, 0x18, 0x5, 0x3, 0xc1d8, 0x6}}) 03:52:12 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x8}}}, 0x7) 03:52:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000080)={0xf}) 03:52:12 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x600}}}, 0x7) 03:52:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x14, 0xb, 0xd5, &(0x7f00000000c0)}) 03:52:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2277.344980] Bluetooth: hci2: command 0x0406 tx timeout [ 2279.393095] Bluetooth: hci2: command 0x0406 tx timeout [ 2281.440980] Bluetooth: hci2: command 0x0406 tx timeout 03:52:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:52:24 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:24 executing program 0: pwritev2(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000015c0)="83e4201e4467829d02e46bba278a6c62bbe96b0ab5f1b4f0dd38abbaac65235116f6eb5eebe02b6c7619a111d0baeb2eb7adc85186c3793562a527e9502c5d2bffc4d9e879d07a0cd6820c857243c2b7ce439642fa1c0c5dd15281a0d4fda67c31e7c8de5e516f5c46d848cdceb34df5128e58a3648368fdd36cde841396d881f3d95af4edf7a142bcc29f5238b568dee7ac45", 0x93}, {&(0x7f0000001680)="28431a11dedccfbdeee4a6ee19f94af0eb75a5e6145980d5e63060398224e7588de9ed8da64813824a1119b3a164799b58333e813af7af731016b5fe7735057d2083114dfd52e025460af4ccfb6318aa57452e0159660309381364c5139991afc198ed4feee627c955753fca84bb86ea2126eab2c8240d13ad48f2469810ed837a90d3fc48cba3252630de340e414f9a4a58d9ead78e2df54a5821ba37863cd374c78a04540b726153e56e78a81be6a9049b", 0xb2}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="a1e2b246e520e53db466ea2714bc2e170e0e112a5ae955f962a5c9f1dbff97ef121b32899e602c1e4a932eaf73422a9181901dc938b776ad0b49e0f182b6cc020ab114414dd917ce5fd75f365a51e192ccecb8d16a35a15a474f7edd3c8a5906b69aa153d805e1b258e07331c480d9227f27b0dc61cce640e274e3951914b770b0696a2eef8bb1830b750184aa8f0b26499f8a510c518a6926e2e820d71882cacf256ed50695e36547520d95de38678796ac", 0xb2}], 0x4, 0x5, 0xffff, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) writev(r0, &(0x7f0000001440)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="8d4361ee1b1d8499bfccc32cb9bba1c58be3a6f03b75da872d093eb82132d0d6775b4971a69a2c1cbcbd4df2cf35fbcd7ed87c9a6aa2f1556a9d790d1c1012174f4cda0aa0ef055d7dabddf027d150d399473c8b0e7b0fb2c65c888508b697d1b13e79d5d5fb86d97b25d8c51dd4aeba0391070db0ad00edaa1330ccee5cb6420cacbd0636fbe14eabf7b487e25f6882db244f51d657c2bf06525a3dbc84d129b7", 0xa1}, {&(0x7f0000000000)="a7caaae51353a7ecffcd47beaa7c5088322cb3a9fab6427c0cec3824a90e21d7bae8ffac4b9d8893034b41768e421b8d9f69d7b6fa2e31206abe44f96680fee509722263ea50dd1cc4035445fa807c0e6eee57a647cb3a071de0afafb389370c79492819d1c93417", 0x68}, {&(0x7f0000001180)="7e4c89e2aee28dcd2e53f579dc179f6db2c01102063afae2c089e8fa458846eb34b85ae195a5c5486507fb30ab523355cc3fc440a9a5f80ec8455eda25a0015fd59c66f24495e1e2eca19fff837e4efa8eb0bc8d9a9253772a965bf6103c0201b94ffe29ccbe37b20ad774d3bb6d3aa52c9b9ce7a615c8aba554748993eac39a9a939f83623ccc76d5e1955c063d0deaefbfbdd6ebdcf3e347c594946af27a1e488c784d55b8405e62f299a5df42", 0xae}, {&(0x7f0000001240)="062849b65ffb548894af8ac82001d8ace7e2d6a201249ded8048c0e2325a0c6f4ccbb7e4a6a189469f010476806b6b67c1c30a1019a4e68a5cf10a3c9ebcca3bdd838da64e2fb87adecefcef0ca864f874d2dc2778f5beb88c2401932f69127c196cd0dd9c96328405277b5c17bf0bd796283bf87f9c50a3ab1d66ab40578ec85f", 0x81}, {&(0x7f0000001300)="713da20519817cb474e9d86cf3fc31cc1c0085661e8132d126d7a2ed19fd540d611a7ba1b864ccb93f2014867157adc9106ddaa433d41318420dd97915986fd067ea546fc72466a2f06907240418365248071d1542cd81a6a3fcdbeae76da92452412af380bf8684d78de08336fc48e567eca5a9a44e1a9d20894cd087054e23513f1ad987cb5fc3b4f0cf3e130e36fa635fe8fe9cc47c7925d644e558a4e80c9ee37248e435cfa3419bdde8939b1d8e3b69619099f93fc0fb52942341212cb2dbc38afadd04de0a09e57b", 0xcb}, {&(0x7f00000014c0)="0cbfd201d8b330204b08dc45cd0e0795a9960f78a2095514b804de70dfa0e235fa7047734c2cb23648e61a5cb87149dcbe56b9c9e3e9d15389999523988bf52a08aa16441a57305399744cd555ef76fbac379b2f48ce963241e358acd2d498745ee7c3f22d638c2d1a9c5f2e4191d3f62e1596af4f5c6bf7d0b8d6463546e945c1dc4a57d063741cf322a703d27750d9b23f05342dcb93804304d2d21b9140c496da38de173c059a5e56a022439bceb1d20c5a0449f14e5b86ccfd591c6adbfbb44bc20f043c732557663dbf70d885dc0725d915b854de403b0cb02b8a9ca56a87fa811fb1", 0xe5}], 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:52:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:52:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x125, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000080)={0xf}) 03:52:24 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000080)={0xf}) 03:52:24 executing program 0: syz_80211_inject_frame(&(0x7f0000001100)=@broadcast, &(0x7f0000001140)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @broadcast, @from_mac=@device_b, {0x0, 0x7f}}, @tdls_setup_cfm={0xc, 0x2, {0x1a, 0x20}}}, 0x1d) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_open_dev$tty1(0xc, 0x4, 0x2) setregid(r5, r3) ioctl$sock_proto_private(r4, 0x89ef, &(0x7f0000001180)="e79be738da265aaf22afa7e3707b01c2290957ca707b22274d3b05444dd7ae14ce598d35ce2a3f39cff5427e4e398780d364861c9a9ada5173bc4ebc8387284c9b0fe49959420b69a2d338cc5a250c42cce8a3cfbfffec53408346e7a71f8c09354f7112") fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x6, r3}, {0x8, 0x4, 0xffffffffffffffff}], {}, {0x20, 0x6}}, 0x34, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x100, 0x3ff, 0x0, 0xf}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1016) 03:52:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x6, 0x3, 0x778b, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x3f, "825139", 0x0, 0x9}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)={0x1, @create_logical_link={{0x438, 0x21}, {0xc9, {0x5, 0x4, 0x9a, 0x3f, 0x80, 0xe23d}, {0x3, 0xd8, 0x8, 0x8, 0x1, 0x10001}}}}, 0x25) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) write$bt_hci(r0, &(0x7f00000001c0)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc8, 0x49, 0x3ff}}}, 0xa) write$bt_hci(r2, &(0x7f0000000100)={0x1, @write_sc_support={{0xc7a, 0x1}, {0xf9}}}, 0x5) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "09b013", 0x0, 0x1}) 03:52:24 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x0, 0x2}}}, 0x7) 03:52:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x130, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2286.986931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:52:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000080)={0xf}) 03:52:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x0, 0x4}}}, 0x7) 03:52:25 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:25 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = signalfd4(r0, &(0x7f0000000100)={[0x40400]}, 0x8, 0x80000) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000140)="d813eccbde28ce5d344b0af580ea0498c567981d07b3769f75cc16c0c6b9025f6acdd73f293b8dcf703215bcfcd37c3e4058433ece1420af09f37532db252f046b3ddeb220db475b0128581652fd690776575db2c88ae8a238d39cc90a08b9ed17051bfe40d4e1e5a97eba547ecaf2f19829d9d6d3b58976806ad182af9773b6c00de2204fb47bd0d61eb09c28217eaa3ef71723ac16b4c55f9a8c3ce69a60e2cd737cff3ea6581f50ebf24a6d565d5a0922ca143b35ffbcd38c51eb57f19fc0b5f580835a844d4d89fc60cf89c871883acdb3e333841e0479") 03:52:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000080)={0xf}) 03:52:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x13b, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_adv_param={{0x2006, 0xf}, {0x80, 0x6, 0xa6, 0x1, 0xc3, @none, 0x5, 0x1}}}, 0x13) 03:52:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2288.106767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2288.121158] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2288.865143] Bluetooth: hci2: command 0x0406 tx timeout [ 2290.912979] Bluetooth: hci2: command 0x0406 tx timeout [ 2292.961167] Bluetooth: hci2: command 0x0406 tx timeout [ 2295.009026] Bluetooth: hci2: command 0x0406 tx timeout [ 2297.057091] Bluetooth: hci2: command 0x0406 tx timeout 03:52:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x0, 0x6}}}, 0x7) 03:52:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000080)={0xf}) 03:52:36 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x146, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:36 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc9, 0x1}}}, 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x2, "d47a11", 0x0, 0x3}) 03:52:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x101}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:52:36 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$binfmt_elf64(r0, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x5d5) accept(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000100)=0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) preadv(r3, &(0x7f0000002340)=[{&(0x7f00000020c0)=""/148, 0x94}, {&(0x7f0000002180)=""/185, 0xb9}, {&(0x7f0000002240)=""/207, 0xcf}], 0x3, 0x6, 0x7) write$bt_hci(r0, &(0x7f0000001f80)={0x1, @create_conn_cancel={{0x408, 0x6}, {@none}}}, 0xa) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f00000019c0)=0xeb27, 0x4) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000001fc0)=""/190, &(0x7f0000002080)=0xbe) write$bt_hci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="01280311c8000104000001e40080ca000500fc5b07"], 0x15) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.current\x00', 0x0, 0x0) recvmmsg$unix(r6, &(0x7f00000018c0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/178, 0xb2}, {&(0x7f0000001500)=""/63, 0x3f}, {&(0x7f0000001540)=""/92, 0x5c}], 0x6, &(0x7f0000001640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001840)=[{&(0x7f0000001740)=""/1, 0x1}, {&(0x7f0000001780)=""/102, 0x66}, {&(0x7f0000001800)=""/36, 0x24}], 0x3, &(0x7f0000001880)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x2120, &(0x7f0000001940)) 03:52:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000080)={0xf}) 03:52:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x151, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2301.281009] Bluetooth: hci2: command 0x0406 tx timeout 03:52:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x3) 03:52:48 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf73, 0x0, 0x101, 0x3, 0x10}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:52:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008850) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)="e52104d22a4c4d735fde86b939013b3cfef2a723f425bded11cbfeedc3d288e2ca8fa4b75dac923713aa7a1101e3d673f22c946aaaece5e488fec947b3127683b8d95f4f689992dec73ce9cf62d6da10734abb345964c79a6bb531f6ce64b86b2e24ec5f8dd18330204588d658ef5fbd9c8417e1fb75c2c446cb2f082d36e95ae66c7eae8605b6859a95d5edcfdf08c5764751260f507244052ceb970e7d6e0289a18124e13f5c9f541d77af707ca13d19c87161df6f1bdbf7291e930024e718a75fd99cbb") setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x7fff, {{0xa, 0x4e23, 0x4de, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {{0xa, 0x4e23, 0x0, @remote, 0x7}}}, 0x108) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000280)={0x0, 0x7, "501689", 0x7, 0xfb}) 03:52:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000080)={0xf}) 03:52:48 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x15c, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:48 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:48 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:48 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x167, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:52:48 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000080)={0xf}) 03:52:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80040, 0x197) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x2c0, 0x4, 0x7ffffffc, 0x1b1, 0x85, "83d9062992429c2ec3180938614b42e8074a27", 0x2010001, 0x5}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:52:58 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:58 executing program 0: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:52:58 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x178) 03:52:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="00e2ffffff00000000000000", @ANYRES32=r0, @ANYBLOB="00020900000000002e2f66696c65f800c3dfe8c59901dfa45b1f755b21a04462e30c195cc857cebbb6287ca6a4acea77f69d015d074007691dbb543f01bf9f38b49bd8e512fd2c30720927859bef839ac7c80284f51d15de4b56f8ce7f97000000"]) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/bnep\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) 03:52:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000080)={0xf}) 03:52:58 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x172, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:52:58 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000080)={0xf}) 03:52:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:52:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000080)={0xf}) 03:52:58 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:52:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf6d, 0x8001, 0x0, 0x9, 0xf}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:52:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x404) 03:52:58 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x17d, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2323.104993] Bluetooth: hci2: command 0x0406 tx timeout [ 2325.153047] Bluetooth: hci2: command 0x0406 tx timeout [ 2327.201046] Bluetooth: hci2: command 0x0406 tx timeout 03:53:09 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:09 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:53:09 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:09 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x188, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000080)={0xf}) 03:53:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0xfdef) 03:53:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x2004, 0x73, 0x20, 0x1}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:53:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:09 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000080)={0xf}) 03:53:18 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x80000) 03:53:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000004c0)=0xcaf2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xff71, 0x0, 0x0, 0x0, 0x10}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_pts(r0, 0x14200) ioctl$TCSBRKP(r1, 0x5425, 0x4799de27) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x80000003, 0x5162, 0x2, 0x36b4413a, 0x4, "e7bab369f21afa971b501defc1e70bf53d3121", 0x94df, 0xfffffffe}) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x18, 0x2, 0x1e3, &(0x7f00000000c0)="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"}) 03:53:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:18 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x7, 0x3}, 0x6) 03:53:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000080)={0xf}) 03:53:18 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:18 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x193, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:19 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0xfffffdef) 03:53:19 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f00000000c0)=""/56, 0x23bd}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt(r0, 0x4, 0x9, &(0x7f00000002c0)="4b21f54ccd7018fa104aa899681d03bf761bf4e37c5011cceb91e36e578971f576d883ac1acd068a2aacdacaebfde9b96cbbafc0dc708c1823ea79f170", 0x3d) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000001c0)=r3) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0x4}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f0000000200), 0x86800) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x200200, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000240)={0x8, [0x1, 0x3], 0x7ff}, 0x10) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000140)) 03:53:19 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x7, "e9ff00", 0x8, 0x5}) 03:53:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000080)={0xf}) 03:53:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:19 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:19 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x19e, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0xfffffffffffffdef) 03:53:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x0, "ed1f32", 0x0, 0x2}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:53:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000080)={0xf}) 03:53:19 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:19 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1a9, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:19 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:19 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000080)={0xf}) [ 2342.460119] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2342.473609] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:53:29 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1b4, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:29 executing program 1: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_remote_amp_assoc={{}, {0xc8, 0x6, 0x0, "33e50b6c55d143daa6f72d4e5abd95fb07917786895aed69e487f105437bfa4ea3af12d5780d71f612892c9396c5c902617848f8b98bb038f2d9f969241884ee96eda2534165123d41fa906756f4f415ef70b3601082dd22"}}}, 0xfffffffffffffff2) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="014816ef5d559e070404c90040061cb2c70a0e138bdc1e6d8ce22db708763908000000aec483d2a35e7119a84e7ba18aec3a8722b110a4227d56995227a6f4ee2add81f5db00f95c54f78fb780deb801544227bd0ca8098a2a035c284ea72838f6dc519eb40e20db040e6d6541d842eee8d9fabfc009816fee86707cf35557880c9a996ba59a3814fc322705a7951aeb2803b627dd274874"], 0x8) 03:53:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@none, 0x1}}}, 0xb) 03:53:29 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000080)={0xf}) 03:53:29 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000480)={{r0}, r3, 0x0, @unused=[0x0, 0x0, 0x2, 0x1000], @name="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"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_io_uring_complete(r2) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000300)) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) write$bt_hci(r4, &(0x7f00000000c0)={0x1, @write_auth_payload_to={{0xc7c, 0x4}, {0xc9, 0x6}}}, 0x8) 03:53:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000080)={0xf}) [ 2352.452946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.453423] blk_print_req_error: 55 callbacks suppressed [ 2352.453431] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.454569] buffer_io_error: 62 callbacks suppressed [ 2352.454584] Buffer I/O error on dev sr0, logical block 0, async page read [ 2352.455731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.456412] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.457094] Buffer I/O error on dev sr0, logical block 1, async page read [ 2352.457813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.458687] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.459364] Buffer I/O error on dev sr0, logical block 2, async page read [ 2352.460198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.460636] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.461420] Buffer I/O error on dev sr0, logical block 3, async page read [ 2352.466765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.467437] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.468271] Buffer I/O error on dev sr0, logical block 4, async page read [ 2352.470407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.470859] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.471522] Buffer I/O error on dev sr0, logical block 5, async page read [ 2352.472638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.474484] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.476084] Buffer I/O error on dev sr0, logical block 6, async page read [ 2352.478464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.479043] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.479685] Buffer I/O error on dev sr0, logical block 7, async page read [ 2352.480881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.481358] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.482015] Buffer I/O error on dev sr0, logical block 0, async page read [ 2352.483214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.483660] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.484319] Buffer I/O error on dev sr0, logical block 1, async page read [ 2352.485043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.485614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.486393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.486992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.487565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.488372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.489032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.489608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.490471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.491064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.491641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.492198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.492724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2352.493284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2353.269550] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2353.272318] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2353.288127] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2353.289810] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2353.291080] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2353.295342] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 03:53:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1bf, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000080)={0xf}) 03:53:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x1, 0xf40, "2103eb", 0x3f, 0x20}) 03:53:40 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) r2 = dup3(r1, r0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000100)) 03:53:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv2(r0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/135, 0x87}, {&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000640)=""/247, 0xf7}], 0x9, 0x40, 0x1, 0x1a) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, &(0x7f0000000800)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000022c0)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000001280)="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", 0x13, 0x0, &(0x7f0000002280)="776d61137831ce7cbb8fae1fc2cf3b2697e102"}) [ 2363.934000] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2365.153020] Bluetooth: hci2: command 0x0406 tx timeout [ 2367.200992] Bluetooth: hci2: command 0x0406 tx timeout 03:53:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x1, [0x0, 0x8e7], 0x8}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01130403000007fdcb8673f5d3a61e96d73b65430c7081cc0000ee42230bda2d88516e3328391809c58238770a0a55dd00000536da6330db1513d803f6ba045347884e6dd7b7cbd9e97f58bf4d4200973e0645e760cddf06e184b942a970acc59244906884e11f"], 0x7) 03:53:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffe, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) 03:53:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$TIOCCBRK(r0, 0x5428) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:53:51 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:51 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:51 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1ca, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000080)={0xf}) 03:53:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000080)={0xf}) 03:53:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x2, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f0000000040)="3369301b6f7b0645e100cfe61a5965a9e2b3ca797b59f8ee13d3f1cc061674fa276667e20f29fb6e59eda5e50522be6bb9a7c5f837ae1d11c27d1a5c89cbe45653b84193607a72c0f5f537d0ad724489e3337dc8f3b6c440c1624be4a5d7fbeefae6fd36c48145208f67e8ba424ebcb05301eb30e12e38902f841402b4945dbe29b53f63b12f760feaee8679039dc1c22c20d7d791d3333f4e80bcb791d0d825", 0xa0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000140)="0c12c123f31a9470dc61200565a1ce7084eb7b0bdffb396c87e0713b4f9f11d76cc147b57e2bc1ec9cb01a1fe08681714fb20d4d9979151f851a53709ba1f39716f7ffab958d4f44189c4138de2b8ea6a9a08cd19bfc542a64b5c8d4964927e28511b1edba61e7f4", 0x68, 0x0, 0x0, 0x3}]) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:53:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x0, 0x1}}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf, 0x20010, r2, 0x10000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:53:51 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:51 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x7) 03:53:52 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1d5, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:52 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:52 executing program 4: sendto(0xffffffffffffffff, &(0x7f0000000440)="b16bff015eab468f05be66d23ea546de94022f2157f05c2047e57c9e1e76720d993712174ea7689e09a9157830c40f88d196e6c99fea2f13ce63f1d4eec380d8e3d5d6842b832342c4ce39013b7983172dd92530704809b67b3dd34c889a49a9d637b827d83dd55adb6d7116c89b2108adf8f194274a34cede2d17bfeaaacf3aa709", 0x82, 0x8004, &(0x7f0000000500)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ecb-aes-aesni,sha256-neon)\x00'}, 0x80) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$sock(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)="e326ef40d2d4ab00a9868c5a2d8a74f6f00551467070b7f77e60f04c199186264bc3a691e1ce06588c79beb1a4ade9185cfa86f4a8db6dec4a929ea7b7d29f9c3c38ec4387717fb17bdf553f", 0x4c}, {&(0x7f0000000600)="a027aadfd7659d14dc1c488598b0445e284ccab7daf9ad5cd66c0086e4140706e703b9683a8590a3a923a9feba322459cc575ffc85cd3a2f5f5b12e02a2845db414fa08a0f49458daa9e9d490e30bb025554c9727868e6998a6c1e74a01215cc6773a3aef9349d2cfa4be285a01082153c6535b73144451f3f8f747689c4162fba4bd2f4d2d582098de730402d6f21df183421c2e446ecfe534170462236f4d0d5319925f53e1a4506d55fecb4ec98201231a9e47a8be1a28e799eaa07563e93860f5a555a50051c47", 0xc9}, {&(0x7f0000000700)="456f63a851e8ac2c4a05ed40e1e087f46a219c5438f6dc9df38e1658ac837dda75ac653e7713b24122577826395f218cc6b0257bb884ad3de2ceb1eb13e87b622133f2d1f03ca4a50347d9b25a8c84ff1a697682ba584529b47e0a75", 0x5c}, {&(0x7f0000000780)="56e7578f187e0b73a5111b968e5cea0967bfc0ba97c9bd95afd97487cee60f2851dd57b72afbf69684c6481835db48ab56076487af3449e41684fb1951998ccbcabb3018d4333ab248f5d7c8a05c1ba3d3e1c0576891da83ab2a3ede7c3257de1bdf28cebf44337c96035aa719ef56871a70403d85d1ec23e443bd29c1d4d86df36a64fac309d66d12a80c6cf46b3646a7f56a68d5f35eba442d2361185ab652db7f6132ab059cd7f57662fefe0ddc023f90144d90c011", 0xb7}, {&(0x7f0000000840)="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", 0xfb}, {&(0x7f0000000940)="a9cbf96b8be53e1c30afb2f466c5e2d3b79de8820139ccdc3e4648b5a5f95308ac06aba9480bada9336518241265ee511d67aeb9d499ac62612e557d2a81ba33ce3e15d2c18d8af6bb44f254fad06d22d8f004b4e0b1b8aee7f2b5002892aa1bf26521db30e77ee384165fd3b8bb26bab5bfc613c2e3fa7b4f60440d18dc82408da7e8370721c528869b50a21195f64cd8", 0x91}, {&(0x7f0000000a00)="b780d523e8ad7ccd7d074128b63c1aa6e64075f0fa07", 0x16}], 0x7, &(0x7f0000000ac0)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xf2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xd24}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5c}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0xf0}, 0x4) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:53:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)={0xf}) 03:53:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000080)={0xf}) 03:53:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:52 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x9}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="19d87fec823b2913cbf951ad695b7a395783350985a0b33424e4d0d7a013ca0de659752da85f03e4cd69d24db52809249aef552a85bbcc18f0ffe533a3ca506f666379f5dedcbb6f23b0bb527cf207a9e0fd25e019d5fa7e24f0e0110f79575201500b7c3e6117a10a6bb1fa4ef7fe1399884a8ea91613d604b13edeb19d061789741444f8ae4f00"/145], 0x7) 03:53:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:53:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000080)={0xf}) 03:53:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 03:53:52 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'gretap0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000d382aab5cc63da42c5e0fc08893785ca3c6cdca4a8b8fe4b7830e2232cb47d5756c5e5a65f245f668686c9322a5421be948eccba732294548936a840ca00"/84, @ANYRES32=r0, @ANYBLOB="ff070000f10300002e2f66696c653000"]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4}, 0x6) 03:53:52 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1e0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:53:52 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:53:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000080)={0xf}) 03:53:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$sock_bt_hci(r1, 0x3d, &(0x7f00000001c0)="5e995cf67256ff0591c721be3750d7311e6bf978ff6cc5b26f8952075fb94d4220e4337adf2b12b1532ab14b41db3486fcd95cb19d711e8c6f74f7e71175fc39e599b9cf8c4be1338ac649a0dae556629da94e737d883bc44f1740f13df1837dbbdcaba43c1b60512efca32083f5f940c0eba088ddf7c010e0b14833b87d0c2861ada81e4eaceca2703c4881df93533e6b0059443998a3c8064329ab106d5d81887bcd24609388ee2fb2bcd0c2674ae3cd8765a992f2c62c8087d7145c486745420b967a9e09353e19510dd296a3407c42d1500aaa1440fc6e0430ea4f8dc31941ce38cd96584fe0e97fd7b18cc6455c665f9ba7feff67ccae5dd011963977835bc79635ccfd924f988c5aa5f84ebd5dbcce6f1aaa419b690c3879801ff3e97d69942f867e9793380fddbc4104ce777288f574a7c6dcada8453309c273eec8e0b27c05ed6fc59063246d7a1270") [ 2375.678104] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2376.289069] Bluetooth: hci2: command 0x0406 tx timeout [ 2378.337043] Bluetooth: hci2: command 0x0406 tx timeout [ 2380.385163] Bluetooth: hci2: command 0x0406 tx timeout 03:54:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x6000c0, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) 03:54:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000080)={0xf}) 03:54:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:54:02 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:54:02 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1eb, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) lseek(r0, 0x10, 0x2) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "f311b6efe5e7c721dc7266eae9d22dda", "2b442967c2eb9e636a588d4dbdecc8ee", "0da68bd1391647a261674dbdd3df2cc4", "25ebb3012dba43985f1b0f577b9de335"}}}, 0x4a) 03:54:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:54:02 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000080)={0xf}) 03:54:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:54:02 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:02 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x22101, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x129, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002bbd7000fcdbdf25510000000c009900030000007e0000000a00060008021100000100000600ffffffffffff000005088a00"/70], 0x4c}, 0x1, 0x0, 0x0, 0x48004}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:54:02 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:54:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:54:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000080)={0xf}) [ 2385.869224] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2385.872540] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2387.169165] Bluetooth: hci2: command 0x0406 tx timeout [ 2388.460435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2388.463501] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2388.467249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2388.472513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2388.476405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2390.497043] Bluetooth: hci1: command tx timeout [ 2392.545087] Bluetooth: hci1: command tx timeout [ 2394.593156] Bluetooth: hci1: command tx timeout [ 2396.641992] Bluetooth: hci1: command tx timeout [ 2407.133457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2407.134829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2407.214522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2407.215659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2408.397345] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2408.398664] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2409.632966] Bluetooth: hci2: command 0x0406 tx timeout 03:54:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xf800, 0x8000, 0x9, 0x5, 0x3}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0x3, 0x100, "691c41", 0x5, 0x24}) 03:54:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:54:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000080)={0xf}) 03:54:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @set_cpb={{0x441, 0xb}, {0x3, 0xbf, 0x8, 0x7, 0x3, 0x0, 0x7}}}, 0xf) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:54:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x566a, &(0x7f0000000080)={0x0, 0xaaf0, 0x0, 0x2, 0xdc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000002c0)=0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$sock_ifreq(r4, 0x8932, &(0x7f00000003c0)={'vlan1\x00', @ifru_hwaddr}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000340)={r5, r6+10000000}}, 0x3) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7) 03:54:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:54:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1f6, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:54:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc, 0x5}, 0x6) [ 2419.567704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.568226] blk_print_req_error: 15 callbacks suppressed [ 2419.568236] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.569449] buffer_io_error: 22 callbacks suppressed [ 2419.569458] Buffer I/O error on dev sr0, logical block 0, async page read [ 2419.582371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.582834] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.583683] Buffer I/O error on dev sr0, logical block 1, async page read 03:54:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:54:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2419.598277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.598742] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.599517] Buffer I/O error on dev sr0, logical block 2, async page read [ 2419.604919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.605366] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.606190] Buffer I/O error on dev sr0, logical block 3, async page read 03:54:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2419.611215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.611670] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.612364] Buffer I/O error on dev sr0, logical block 4, async page read [ 2419.616697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.617411] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.618097] Buffer I/O error on dev sr0, logical block 5, async page read [ 2419.626080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.626540] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.627223] Buffer I/O error on dev sr0, logical block 6, async page read [ 2419.635095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.635571] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.636402] Buffer I/O error on dev sr0, logical block 7, async page read [ 2419.639882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.640393] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.641176] Buffer I/O error on dev sr0, logical block 0, async page read 03:54:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2419.651929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.652385] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2419.653056] Buffer I/O error on dev sr0, logical block 1, async page read [ 2419.656630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.657235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.659999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.660574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.663680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:54:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000080)={0xf}) [ 2419.666992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.668263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.670018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.670600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.675495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.677289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.677866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.680660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.683697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:54:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2419.748188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.748798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.761237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.761824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.768161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.768743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.769420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.777839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.778505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.788449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.789319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.789881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.802993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.803566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.811194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.811839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.820056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.820635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.826117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.826691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.837930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.838501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.840679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2419.851985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.373660] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2420.411603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.412457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.413263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.414670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.415512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.416854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.418464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.419331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.420619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.421822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.423105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.423873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.425363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.426423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.427622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.429130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.430836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.431633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.433156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.434511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.435856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.437135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.437958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.492248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.497116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.498251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.502096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.502875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.506048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.506830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.510092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.511169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.514108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.514929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.518775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.519589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.524517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.525419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.530349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.531314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.532610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.534248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.535529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.536428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.537677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.539717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.540547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2420.543432] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2421.920952] Bluetooth: hci2: command 0x0406 tx timeout 03:54:47 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x201, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x7}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011304030000001a00bb689b0e5833ff36b867b65f60874655eb83949c772e5b01c1f13067de8b257d05fe8e5c3336cf2f6b2c30e2fb38dc68cac3112d91fdcef00eaab0c96965d8c3649e9fc163c0155b9f9e3e497ea6d192fec41a5c00281eb77e1bfb141ed68401e40dbbd5"], 0x7) 03:54:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000080)={0xf}) 03:54:47 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:54:47 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:54:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:54:47 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x134) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) lseek(r2, 0x7, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="291a0f76a028000800b7900700d16901256eda3656a93c7ab75714ecb11f8438c0ebf6812f1e50b463d8c8b6abecb2ea0ceedddcac8828e476fd9b4f8086303081ec99a3eac2419c2a64f66a00000000c0fbe48386c1f5ce70ec860a838bbe7a032b25", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r3, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x48011) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000003c0)=0xde5c0770c989e48c, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x14, &(0x7f0000000000)=0xffffff7f, 0x4) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbf9, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20001000) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchmod(0xffffffffffffffff, 0x1) 03:54:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000080)={0xf}) 03:54:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000080)=0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:54:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2430.773272] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2431.969018] Bluetooth: hci2: command 0x0406 tx timeout [ 2434.017027] Bluetooth: hci2: command 0x0406 tx timeout 03:54:56 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:56 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:54:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)="92cf4dbe87dc21f2c236ca018632760b65749b926aa784848d8fe486594597c8d26bdf40e472ab968fec40d5ae1f2937d48543aa9a95a725ed8bb94e2c6db1361d239424262818170101000000000000c6414eaea449e5d96d2f86c574aa20d93f4150b6ca4649e73ad658548c9758af97684144a5e35ef578a6d01e43f3c1230aec39bd799a80d7a118815e45cd9b3b280f0cb8c7d5f58ce2a3fcc8dc53920c82c90f70cb5088d93da33500579f97de3012e9ef451205469b5252412aa54b") 03:54:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x20c, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:54:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:54:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000080)={0xf}) 03:54:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x7f}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:54:56 executing program 1: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:54:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000080)={0xf}) [ 2441.441015] Bluetooth: hci2: command 0x0406 tx timeout 03:55:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000080)={0xf}) 03:55:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xd775, 0x20, 0xfe01, 0xfffd, 0x3}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:55:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x217, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="d5a0fea8557385c4d929b7c60000000000002e2f66696c653000"]) write$bt_hci(r1, &(0x7f0000000100)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc9, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_name_req={{0x419, 0xa}, {@any, 0x3f, 0x40, 0x1}}}, 0xe) 03:55:06 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:06 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f00000000c0)="d47e4b1d1c563e6efd2d886e30c28b50fc579962c19687c8c17ee482644cb85769797aef7085a13f52a592188847fce81e2e0a25a81770668bdd75e63144011102105dfae9018b08c5258801cd7dc2f7afd706604daa6574511c950047709681405c5796abb9354d4fe8952950724b4c565b070660ecfad8fa4a3787d41dffcd0555e6f129ee4a609f880d8cb714b3bf877da3e22f1ebc6803584e6146d8a0a480822a2c7fde41ab03e2") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="01001ade063e2ef47d6e6b27bf28e9cbe1caad3df46e1976cf7729479674ee53d8381966abd94fe470b48ac3b073196c7b4940f7c5dcbe4734b8043bd13fc38681616202b38c10b8ea7f30ced06cfafc374ece084579c1110ca04b979efb9fccf3c82e620d2fa3769cd536d09968af153536e68c43da3770b6b180b1fc1c56e98f638e879c0ea895abc94d41be47a80ed4462c47b213f997a14c3c2780f3a55ae8eacb106fc700b2e5fec7431d338d3ef8bf4137a5fef20baacc2d6988b43b64", @ANYRES32=r0, @ANYBLOB="00002f66c7011f3b696c000040a59600000000009425b627b332959056c6847f101057e185655c2bfc30fb307f1e4480c51643047048984a0d236a61b732f719c3d2bc365118e4c36d716d5a7b3c0c0b6ff93af5f70b3e32a738aece60b51446caefd98640e97a17da784f6ac246da2cc8af552855c89117fd4b8a90594553ad6af0beaba0ca37f0ef62c3aa9b89512350231d1945532eba247c7711658f46449eb5"]) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'caif0\x00', {0x2, 0x0, @dev}}) 03:55:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:06 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:06 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="b9c140834cb401eddca5de8c9956f028425f313e7ca67cb5320c4c"], 0x7) 03:55:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000080)={0xf}) 03:55:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000040)={0x0, 0x78, 0x3, 0x1}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000440)="7017c9800c367c4729605ae39336c2e13c6d656cda0e4055d8f49c3b2b55c89d589d45e5f7dd6a7349e548f9a63600bebd1b41416671677cd84ddd04f6db376ffb7b61c4cce181dcb908a7bd82f5318cba18c0ebc5ece7057af0af5ce9250f151dc19f069bad3eef967cff4985503b5272bf5f0cb8a81f7334") 03:55:06 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x222, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:06 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) fsync(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'sit0\x00'}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) signalfd4(r4, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x4e70, "fa6cfb", 0x3f, 0x5}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:55:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffef, 0x4}, 0x6) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, &(0x7f0000000080)="4fbf7cc8a73d30a2fb70748a94bbebfa4371f2687b0668d84518506359e01ee64db56458d9bf1285564d24c3675a2693c3be40d7fb1e5f50760a51317a9c195a45baac3b02853f70f5869b34ad9ab457f437878d4c466e00ca6467a491a5455428433a4dc0e5b59db28d6aab38d555559f12b4581e86fe3d84aff5067df420358522009b41de268f994d88fbde1406a57bfcab1206519ae2c4bea670cfb18c14f36c95a8b66b82f18012a78c4e394ec04e37693aa301b138141582a3211350adb89d94828d16ca862bd3ef40839a411ae147a4dc2f7dcc1b421f74472f9e02ca") 03:55:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000080)={0xf}) 03:55:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2450.168935] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.170276] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.173743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.337663] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.338999] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.341102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.342700] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.345456] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.346641] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2450.348765] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2451.169037] Bluetooth: hci2: command 0x0406 tx timeout [ 2453.217004] Bluetooth: hci2: command 0x0406 tx timeout [ 2455.265014] Bluetooth: hci2: command 0x0406 tx timeout [ 2457.313059] Bluetooth: hci2: command 0x0406 tx timeout 03:55:17 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:55:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x4, [0x906e, 0xe1], 0x51}, 0x10) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x0, 0x745, 0x900, 0x5, 0x8, 0x7ff}}}, 0x12) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01102007fefffffffff4a6774b75d456994e03ca1510c9db66a8123018aab5c02a33d3d68d83489ce27ebbbc47d1b1c28e782a0dc0e716d2e2164ca9292120000000000000000000000000005eac627f3ae1f372f391cd3f7bfbf8db3d48"], 0xb) 03:55:17 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0xf}) 03:55:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:17 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x7}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000180)="f9a2101eade1636ae80c6bf6cb8f7e11162c320725ad4f36efca40f9078b0ab56719daa6bd3c5a72dbd32c3f94af7d08d7c25800bbafd0117202062ea7d28c38e6d805cdfd277aea79adea8c51284eeaf898c40f6e374e168ac5c77ea57e55c42139bddf07213f82fea5f53edc6ef3bfebbf8c6baca1d4960202287236f2f908ac259ec91884ea3e708e492ac65b7194b62ad7e8d9856d07690f89c87716e75ca2226ec4ef2b78ce8c9329f0971b38dddf90ad0e017833486819be46109e319aaaef63ec88985d") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="6436bf092d34c7bbcd444b3891eff6f7800cfed74070e384a1f44cbfe3a086249f5ea12686749c", @ANYRES64]) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1}, 0x6) 03:55:17 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x22d, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0xf}) 03:55:17 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x200, 0x3, 0x400, 0x7, 0x9, 0x9}}}, 0x12) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="dfe0d358b0fcdc842cd39433e2cac41391b04d6190b84647491342d0d1b7095e8b9fa7b9d612012fd0bce1fe") bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000100)) 03:55:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:17 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(0xffffffffffffffff, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:17 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2462.432988] Bluetooth: hci2: command 0x0406 tx timeout [ 2464.481086] Bluetooth: hci2: command 0x0406 tx timeout 03:55:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) 03:55:27 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(0xffffffffffffffff, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:27 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x3, 0x3, 0x6, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'veth1_to_team\x00'}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="a2ab28825fb0a275f4167611ff5ed12b5ce2df0f5100f7eb3a9d17ccaac921db3baaa2b943b2e8ece372b6b741c5f9ac710788cc5ff6d1"], 0x7) 03:55:27 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x238, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000080)={0xf}) 03:55:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0xc, 0x10, 0x83, &(0x7f0000000100)}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r2, 0x4, 0x80000}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000540)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:55:27 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:27 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(0xffffffffffffffff, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000080)={0xf}) 03:55:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:27 executing program 4: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x4, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) syncfs(r1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:55:27 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x10200) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0xf}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:55:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000080)={0xf}) 03:55:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x243, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:55:28 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2472.737063] Bluetooth: hci2: command 0x0406 tx timeout [ 2474.785051] Bluetooth: hci2: command 0x0406 tx timeout 03:55:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) syz_open_pts(r1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:55:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) 03:55:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @sniff_subrate={{0x811, 0x8}, {0xc9, 0x8, 0x1, 0x7}}}, 0xc) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) recvmmsg(r0, &(0x7f0000001180)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000200)=""/213, 0xd5}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000680)=""/110, 0x6e}, {&(0x7f0000000700)=""/96, 0x60}], 0x8, &(0x7f0000000800)=""/237, 0xfffffffffffffe1a}, 0xca04}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=""/161, 0xa1}], 0x1, &(0x7f00000009c0)=""/182, 0xb6}, 0x3}, {{&(0x7f0000000a80)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/215, 0xd7}, {&(0x7f0000000080)}, {&(0x7f0000000c00)=""/148, 0x94}], 0x3}, 0x8}, {{&(0x7f0000000d00)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000f40)=""/117, 0x75}, {&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/71, 0x47}], 0x4, &(0x7f0000001f40)=""/84, 0x54}, 0xaab4}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000001fc0)=""/119, 0x77}, {&(0x7f0000002040)=""/131, 0x83}, {&(0x7f0000002100)=""/227, 0xe3}, {&(0x7f0000002200)=""/227, 0xe3}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/69, 0x45}, {&(0x7f0000003380)=""/206, 0xce}, {&(0x7f0000003480)=""/60, 0x3c}], 0x8, &(0x7f0000003540)=""/231, 0xe7}, 0x400}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000001040)=[{&(0x7f0000000fc0)=""/109}], 0x0, &(0x7f0000001080)=""/221}, 0x4}], 0x5, 0x12102, 0x0) 03:55:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x24e, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000080)={0xf}) 03:55:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x58) [ 2482.209110] Bluetooth: hci2: command 0x0406 tx timeout [ 2484.257938] Bluetooth: hci2: command 0x0406 tx timeout [ 2486.305180] Bluetooth: hci2: command 0x0406 tx timeout [ 2488.353048] Bluetooth: hci2: command 0x0406 tx timeout 03:55:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x5ba5, 0x2) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:55:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000080)={0xf}) 03:55:49 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x311100, 0x10) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2980, 0xa) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000300)) 03:55:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x259, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) 03:55:49 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:49 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "5e9cca772f551edfe55ea3b057468b6d"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24000010) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:55:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x1, 0x3}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) syncfs(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x210000, 0x9c) 03:55:49 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, 0x0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x2}, 0x6) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 03:55:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000080)={0xf}) 03:55:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="cfe1871c01c4775fece0d13bd13286e1e91db2f77d568e188c21c44a0b43f51437c4ed540aa426667c489a29194326461be96787f5731f8dc21d746e689430fd085cedc37681000a2c718cd1f148f04561ab722f286dde50341be5f3410fd8034ef305e167f705269deac82b00343904de87a171fda2bf5178f2ed89d103004ce8df200065aa30ce4e83f0bec3d9") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:55:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000080)={0xf}) 03:55:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x264, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:55:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:55:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) 03:55:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000080)={0xf}) 03:55:49 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) 03:55:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:55:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x26f, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2492.849580] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2492.850836] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2492.853655] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2492.855813] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2493.729671] Bluetooth: hci2: command 0x0406 tx timeout [ 2495.777022] Bluetooth: hci2: command 0x0406 tx timeout [ 2497.825044] Bluetooth: hci2: command 0x0406 tx timeout [ 2499.873129] Bluetooth: hci2: command 0x0406 tx timeout [ 2501.921619] Bluetooth: hci2: command 0x0406 tx timeout [ 2503.969013] Bluetooth: hci2: command 0x0406 tx timeout 03:56:02 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, 0x0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:02 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f0000000080)='-.[\\!D4,\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000540), 0x8000, 0x32100) bind$bt_hci(r2, &(0x7f0000000580)={0x1f, 0x4}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRES64=r1], 0x7) 03:56:02 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x27a, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6) 03:56:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000080)={0xf}) 03:56:02 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @user_confirm_reply={{0x42c, 0x6}}}, 0xa) [ 2514.273123] Bluetooth: hci1: command 0x0406 tx timeout 03:56:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x7, &(0x7f0000000100)=0x2) write$bt_hci(r0, &(0x7f0000000000)={0x1, @exit_sniff_mode={{0x804, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0113040300d607"], 0x7) 03:56:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x285, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:14 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, 0x0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ext_create_conn={{0x2043, 0xa8}, {0x20, 0x8, 0x79, @none, 0x0, "70b04c7c463663ad1c92769756280a44fdcc6dbd67532e5690ef1edc747abd4da56f2a7a5ea67a9fb8fe227a0985dcc644b02ceed8994b2d1f27af076a6e7d4cbd4632ba1384a889f4709b25b33ac006f0196c74d611d27fb9d78b9cf36eefb3b8e517d83cecb76a380d207fbad1f97d5dbc4ec886b24b5a7fe04ece17278fcd97bfa4526fa5695639948541cd295015c3f595f3c49b56fba598b3f6c2d9"}}}, 0xac) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x7f, 0x8, 0x5}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 03:56:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000080)={0xf}) 03:56:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000340)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) syz_io_uring_setup(0x17b0, &(0x7f0000000140)={0x0, 0x6763, 0x0, 0x1, 0xd4, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r2, &(0x7f0000000240)=0x80, &(0x7f0000000280)=@x25, 0x0, 0x800, 0x1}, 0xa17) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x684, [0x80, 0x1], 0xffff}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'rose0\x00'}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)=0x2) 03:56:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@any, "38ff150f5316c061dc6deacf2f820bd0", "0f34ba4768b23db32341abee190797e0", "c66d207351e2a70a7a542656846b0034", "d399783fe1a97a25b7a63a1e31673056"}}}, 0x4a) [ 2516.641485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.642412] blk_print_req_error: 85 callbacks suppressed [ 2516.642429] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.644490] buffer_io_error: 86 callbacks suppressed [ 2516.644505] Buffer I/O error on dev sr0, logical block 0, async page read [ 2516.664865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.667861] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.669494] Buffer I/O error on dev sr0, logical block 1, async page read 03:56:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000080)={0xf}) 03:56:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2516.703566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.704689] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.706203] Buffer I/O error on dev sr0, logical block 2, async page read [ 2516.718724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.719767] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.720970] Buffer I/O error on dev sr0, logical block 3, async page read 03:56:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'lo\x00', 0x5}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) fcntl$setstatus(r1, 0x4, 0x2800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf5) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) [ 2516.736717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.737562] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.738755] Buffer I/O error on dev sr0, logical block 4, async page read [ 2516.747468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.748314] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.749543] Buffer I/O error on dev sr0, logical block 5, async page read [ 2516.762500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.763750] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.764930] Buffer I/O error on dev sr0, logical block 6, async page read 03:56:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x290, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2516.782608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.783468] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.784831] Buffer I/O error on dev sr0, logical block 7, async page read [ 2516.804164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.805083] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.806318] Buffer I/O error on dev sr0, logical block 0, async page read 03:56:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001100)=0x7, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f00000010c0)={0x1f, 0x2, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000040)="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") ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000001040)) bind$bt_hci(r0, &(0x7f0000001080)={0x1f, 0x3, 0xc3b3ea773839b7d8}, 0x6) [ 2516.835086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.835867] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2516.837273] Buffer I/O error on dev sr0, logical block 1, async page read [ 2516.854097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.860112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.869306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.870428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.879082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.882130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.886122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.893114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.901103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.904992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.910149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.917173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.922067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.934341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2516.994406] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2516.995845] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2516.996749] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2516.997616] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2517.002673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2517.028770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2518.624973] Bluetooth: hci2: command 0x0406 tx timeout [ 2520.673020] Bluetooth: hci2: command 0x0406 tx timeout [ 2522.722039] Bluetooth: hci2: command 0x0406 tx timeout [ 2524.768961] Bluetooth: hci2: command 0x0406 tx timeout [ 2526.816994] Bluetooth: hci2: command 0x0406 tx timeout 03:56:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000080)={0xf}) 03:56:25 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000140)={0x5, 0x5, 0x8001, 0x5, 0x5}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ieee802154', 0x40000, 0x184) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x40, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) sendfile(r1, r3, &(0x7f0000000180)=0x8001, 0x7) 03:56:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @create_phy_link={{0x435, 0x9c}, {0xc9, 0x65, 0x1, "af4e739f1d0cceab4300dd1d004bd654f792d3b31c8d9c8ab1927bc59c62bdf9bd8193266130479964b38ea610082c5669407ab5f14862aebb27d3827fbb2c003363d54b7b7062d1633d72a2765687b5529bfdad56b4bb3ea740f7076e52fb1b9e99b38c3d3f56ffc0153da843b4ec594c515700168315f0407f5d4baf46b466fd3588e623008f46d293ccfe8794a23a20d40dbc0a8958f4f6"}}}, 0xa0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc8, 0xff}}}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x4, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:56:25 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) close(r2) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01130403000000fe4d45e4511407616fcc2e37e815618b888e364efb0c1fc7d1d6b86931b1d805299c587f2dc04f24c6dc164c6a90de64a8d64ac4b622921bc771e12afb9f"], 0x7) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5e96) close(r3) 03:56:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x29b, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000080)={0xf}) 03:56:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2a6, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:25 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffed}, 0xffffffffffffff9b) 03:56:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x401c5820, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:25 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:26 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2b1, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000080)={0xf}) [ 2528.864975] Bluetooth: hci2: command 0x0406 tx timeout [ 2529.050480] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2529.085112] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2529.086315] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2529.088339] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2529.089682] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2530.913038] Bluetooth: hci2: command 0x0406 tx timeout [ 2532.961116] Bluetooth: hci2: command 0x0406 tx timeout 03:56:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2bc, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x1}, 0x6) 03:56:36 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000080)={0xf}) 03:56:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x7, "9d10e9", 0x3f, 0x5}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:56:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="f539fee9137f", 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x11, 0x11, 0xdc, &(0x7f0000000480)}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:56:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(0x0, 0x34) 03:56:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x2, 'macvlan0\x00', {}, 0x8001}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x400000) write$bt_hci(r1, &(0x7f0000000100)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc9}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x80cb, "182b00", 0x93, 0x2}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) write$bt_hci(r2, &(0x7f0000000140)=ANY=[], 0x7) 03:56:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000080)={0xf}) 03:56:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0xfffffca8) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 03:56:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80085610, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2c7, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x8}) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0xfb, 0x89, 0x6, 0x0, 0x3, 0x200a0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x50000, 0x4, 0x2, 0x0, 0xffffffffffff0001, 0xfffffff8, 0x49, 0x0, 0x7, 0x0, 0xe40}, 0xffffffffffffffff, 0xe, r2, 0x8) 03:56:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000080)={0xf}) 03:56:37 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x3) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{0x20, '-'}, {0x20, '+)*(*^'}, {0x20, '\xae*}^.-'}, {0x20, '*\\,{#U'}, {0x20, ','}, {0x20, '&$+&})]&^*.#'}, {}, {0x20, '+{!@!('}], 0xa, "791a7305137e18cbd39510cedb5c0b32580709db3bf4482d36c675778d75126545c4f13cba5b30468134035f291fc3fe93628bf8e3687800def810b8f126a38e3ee0a8c95e4710508241797c6e67c0ca5e5197feeded04b051e3"}, 0x93) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:56:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000080)={0xf}) 03:56:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2d2, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000080)={0xf}) [ 2540.321553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2540.323948] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:56:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x940, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='%-\x00', 0x0, r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) [ 2541.345032] Bluetooth: hci2: command 0x0406 tx timeout 03:56:47 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="24533e1cf0f1175f30ecad108eb3b2f32662b57023d76ac744810df87256dee0aab63d2e36b73aa6e37eb6d0604b8f21f59d5970baa13606c913fa80ebc64a049d098b1ff3c446b34388ce496c4b55b4d9b2cf13718a49f19ecece022af23d3d9c64075e9b493d0fdc3e5ca21d8c3563c531675f7f33a1e7b4d6585407be345dc16bb4b85241562ae6fb3e10feebc1cbe5a41bb0fb48cc21fd3120e8ed7c2fcbfd7e6225c3287c235404b678e85ab0517ac3638fce42a6ee2fd8af61122a6718eec4ceaa6dcc59a6df0ffe583bc5cbb6bccc58ee1bd494c5217070bdaf296ea5", @ANYBLOB="04001e00000000002e2f66696c653000"]) 03:56:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000080)={0xf}) 03:56:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80111500, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:47 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(0x0, 0x34) 03:56:47 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2dd, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:47 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000002c0)=')\x00', 0x0, r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x8, 0xc78, 0x4, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7800, 0x62, 0x401f}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf2501000000060006004e240000060006004e23000008000100", @ANYRES32=r3, @ANYBLOB="9bb4775a2fc2519c6cb8a0bada4ddcf55be1827de17f61384f08fa68841c8eac0d2a48a2fec77efbcfc63a470869934e7811292a4ab2858e2fa3af931e78b2551dcdbecd7687e8f78083d306017090cfb0d1c279f64509905c198191fc06515e35983c05395b9ff53d2f7b610d0cb9dacc54d0de4a7b7c20cacd53f103582829f8cc1774ddf7f7b85a9e6578dc76b4b0f6be6ca62603e3d83d976ec460c8b79601ea729816ff584bc51036d3"], 0x2c}}, 0x4000091) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080)={0x101, [0x403, 0x10002], 0x48a}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x4, 0x9, 0x40, 0xa8, 0x1d, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7, 0x8000, 0x3f}}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:56:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000d5f31fce024575ab6e08000000c5478ff70b185a50a6bcb76246512544a2768dc1028d94ba993aaf0533b2bea3dee9c1369470bad0b52464aaaf843296a3624c8fdacf01834e2147f9d3"], 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x3}, 0x6) r2 = socket(0x5, 0x5, 0xff) write$bt_hci(r2, &(0x7f0000000000)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x6}}}, 0x6) 03:56:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000080)={0xf}) 03:56:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x801c581f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000080)={0xf}) 03:56:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80811501, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2551.300825] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:56:59 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xfe23, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:56:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="92f4dab44b32c728119b81c96318bf929753e739e7e30f4c521296174923c36dcbd58c2e63a60a387998af27f909f9f0b0a9e9b84986cfd3bbed0345") write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:56:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/220, 0xdc}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000240)=""/197, 0xc5}], 0x4, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/253, 0xfd}], 0x4, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x2, 0x10062, &(0x7f0000000a80)={0x0, 0x3938700}) bind$bt_hci(r1, &(0x7f0000000ac0)={0x1f, 0x2, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:56:59 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(0x0, 0x34) 03:56:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:56:59 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2e8, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:56:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000080)={0xf}) 03:56:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x0, 0xf}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000100)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x10000, 0x8001], 0x3}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="db9886eb2b416113d6687c70bc0082eb05d73a1b1212eebedea78a8e3515e860f9cc2703ed9f2a026a8dda3d038da9fae7ebab8b40caa652fa6e9febbc59d33d68bbf0267b3c30f1a05983e4431cc462809d7b8367e2bcb203ba5150eeac4a1412669dd425df1091f23bd416d7ceb68cda87e3a8a8f06b1d08f7c1445cec4b9818bdbb7122f24281bfa4f5848563bd738d282ee82924642e1f3aa0f2ce4ed67b9dd79109be6a52e4285e9fe07da918d2973e9270750a2631f0cb08", 0xbb}], 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) 03:56:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000080)={0xf}) [ 2563.873011] Bluetooth: hci2: command 0x0406 tx timeout [ 2565.921117] Bluetooth: hci2: command 0x0406 tx timeout 03:57:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:11 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2f3, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:11 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 03:57:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) close(r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0x0, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) io_setup(0x8, &(0x7f0000000000)=0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) io_cancel(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x1000, r4, &(0x7f00000001c0)="a8ab0bc13f5b740b864e5bc332b24e7ebaa0f424d28d5fc9b88aa4cca3523ac41031c74928e7019c5e2fb04e00f046518b7fb4bc283c06cd38abc8464ed99f954decf415432a9b671b401abc6377f3345fb448b0d069a862ed18c7f6dad7f99b371d50378080857d03461931a85dd4dae55059b39d952d2cbb9d2e7d6b1f96fc35c0fcc005a277a85dfd3ff9776432ef38919ae6c838f8d85114992921aa41b4057754c1da3c3ad70e7e82295fe0805dcdfc95ed3f532e16ae29a92e96b955844c150f4e0a5f4fbc81901100dff99e1564626f3fdd84862c2cbc2e6974c5621f9b7e1b0b2eee7c1c2acb12c5c15e052d377f346dbd88cb", 0xf7, 0x5, 0x0, 0x1}, &(0x7f0000000300)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01130403000000dadb8f27a012fdb546902d769c73057f903c1a57bbff362306e9701d51001001f400b69a399ea7cdeb70cccf388a08000000000000004480a73ece180aed492dd668217a50c4457328f2e0b4a1ca90c086caadf54c2ac3a76010e92d6bb45799891139353b72b1ffc270a9c35b9ac4a7f5e5e7f7a525c3a5dceb45a41ac3fbcfd7dc2578b7aa90c29c5182bf1741812f0eb8306a4560e3c832ae96cca65c9e955c47ac35890c7a15a1baeacbb2bd752fae78584e3a9ba8309f4f96b355ecb21eec2451b2181004d4b44c5de5f83a7cf23c33218b01a69b14d2f89054927613da5a4dd6d9bee83635bef3008046caf3006fa18abaef19d5677cd2a1b25af4d4816334abbfa5deb6fc896a0d6771392e7840f60000095a0ef3a4280f0d1ced51d0036751db9fd28bc6720c788b6a1add4a458bd9ae798e"], 0x7) 03:57:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="012b0409ffffffffffff0906033c18af00dabc846f9d688dbca4c8a2502c6791ba75620d59f9d074c01120186fe5c5a19f9ded070f71c98a85335306da51153f8537af46a796c8df099af4e1e57ba6d1a40ebbe92397bef4882f6c29f4860f571f0da029704e1377896936c361f68b962ce8b40b5b332397ef9e178273e9bd4636460356e3610265067146"], 0xd) 03:57:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000080)={0xf}) 03:57:11 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x0, 0x8}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x1, 0x8000, 0x3, 0x20, 0x38, "70d34db9d23c9578ead9c437defd523ce2a424", 0x3, 0x6}) r1 = inotify_init() r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00') dup2(r1, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:57:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000080)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) 03:57:11 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000080)={0xf}) 03:57:11 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2fe, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x401, 0x5}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:57:11 executing program 4: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 03:57:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2574.864469] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2574.867657] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2574.871010] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2574.873812] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2576.226048] Bluetooth: hci2: command 0x0406 tx timeout [ 2578.273451] Bluetooth: hci2: command 0x0406 tx timeout 03:57:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000740), 0x7, 0x10480) bind$bt_hci(r2, &(0x7f0000000780)={0x1f, 0x4, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0/file0\x00'}) bind$bt_hci(r3, &(0x7f0000000700)={0x1f, 0x1, 0x1}, 0x6) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x7, 0x9, 0x3, 0x5, 0x2, 0x3, 0x800, 0x35c, 0x40, 0x31a, 0x1, 0x3, 0x38, 0x2, 0x1, 0x4, 0x8}, [{0x70000000, 0xffffff01, 0x9, 0x8000, 0x100, 0x7, 0x9, 0x9}, {0x70000000, 0x7, 0x8, 0x7fff, 0xffffffffffffffba, 0x9e0, 0x9, 0x200}], "0ec64f639fb0da774730b23286bc0e50bd13bb0f553b597c19c3890d32826127e6e0287aee8913ff1b4f81c5a057682fc0d0500981cfcae366b9a5ac1d7654c65ee3f4a480019787a53ee0283c4212d73bf4c34d9660fababdf51d663beb30fb62e5728f249897f223bd250ae383483e59af400d8f398471cb82fb6b867be18f80cba82ea214701f1ff5c196eaf8894ad1b95d956002b247210d3897ab4934e1c68e814b683f55d0239dbf7899545a49f695d309b160f3cab65afaef4ef85a4272d4fe5723ab8e571df8f3ab8919e6b3", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x680) 03:57:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000080)={0xf}) 03:57:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5}, 0xffffffffffffff76) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x0, 0x2}}}, 0x7) 03:57:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) dup2(r1, r2) 03:57:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x3, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:22 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 03:57:22 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x300, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:22 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:22 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x305, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:22 executing program 4: ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000080)={{0x3, 0x3, 0x0, 0x400, 0x80000001, 0x7fffffff}, 0x295, [0x400, 0x0, 0x7, 0x8001, 0xe5a, 0x524a, 0x10000, 0x2, 0x0, 0x9, 0x4, 0x94, 0x74, 0x1, 0x8000, 0x10000, 0x9, 0xffff, 0x2dc0, 0x3, 0x2, 0x1ff, 0x3f, 0x6, 0x8, 0x6, 0xed, 0x400, 0x683b, 0x9, 0x5, 0x0, 0x100, 0x0, 0x7, 0x8, 0xfff, 0x3f, 0x7, 0x101, 0x7, 0x0, 0x3c8, 0x9, 0x80000001, 0x1000, 0xde6d, 0x1000, 0x40, 0x3, 0x10000, 0x4, 0x4, 0x1000, 0x1ff, 0x7, 0xfffffffb, 0xfffffffc, 0x1a, 0x9, 0x6fae7897, 0x40, 0x1000, 0x8, 0x6, 0x1, 0x2, 0x8, 0x9, 0xd13, 0x0, 0x7fff, 0x6, 0x7, 0x4, 0x5, 0x7ff, 0x1, 0x1c, 0x754, 0xb57, 0x4, 0x3, 0x80000001, 0x976, 0x4, 0xffffffff, 0x8, 0x7ff, 0x40, 0x1, 0x9, 0x6, 0x7f, 0x8001, 0xffff8001, 0x9, 0x3, 0x5, 0x4, 0x400, 0x800, 0x10001, 0x9, 0x8, 0x35, 0x8000, 0x1ff, 0x7ff, 0x2, 0x5, 0x5, 0x1, 0x8000, 0xf1, 0x5a6e2706, 0x10001, 0x7, 0x353, 0x1, 0xfffffffc, 0x8, 0xf5, 0x8, 0xe5c, 0x1, 0x4304ef50, 0xff, 0x3, 0x7ff, 0x928, 0x81, 0x4, 0x0, 0x68e, 0x1f, 0x5, 0x2, 0x3, 0x0, 0x2, 0xfffffffc, 0x2, 0x7f, 0xa550, 0x2, 0xfffffffa, 0xfff, 0xe8, 0x7, 0x80000000, 0xfffffffa, 0x80000000, 0x5, 0xff, 0x7, 0x2, 0x5, 0x0, 0x0, 0x1, 0x10001, 0xb9, 0xff, 0xe3e, 0x2, 0x100, 0x0, 0x1ff, 0x7, 0x1000, 0x0, 0x0, 0x6, 0x4, 0x3, 0x6, 0x7, 0xf3ebe74c, 0x1b000, 0x0, 0x7fffffff, 0x4, 0x2ad3d828, 0xfff, 0x2, 0x20, 0x8001, 0x7, 0x40000000, 0x5, 0x2, 0x7e, 0xfffffffa, 0x9, 0x8, 0x0, 0xff, 0x80000000, 0xedb, 0x40, 0x7fffffff, 0x1, 0x5, 0x5000000, 0x1, 0x10001, 0x7, 0x2, 0x5, 0xa9, 0x7fff, 0xe2, 0x5, 0x2, 0x3, 0x4, 0x939, 0x3f, 0x5, 0x20, 0x3, 0x5, 0x1, 0x1, 0x429f, 0x0, 0x2, 0x68, 0x5, 0xfffffff8, 0x9, 0x9, 0x8000, 0x3ff, 0x81, 0x8, 0x80000001, 0x0, 0xa4, 0xe626, 0x9, 0x8, 0x1, 0x3, 0x3, 0x5, 0x101, 0x1ff, 0x40, 0x4, 0xfffffff7, 0x3ff, 0x4, 0x7, 0xff, 0x851f, 0x5, 0x6, 0x3f, 0x9, 0x1ffc000, 0x1000, 0x2, 0x0, 0xd1, 0x3, 0x1ff, 0x5, 0x9, 0x6, 0x2, 0x7fff, 0x8, 0x969, 0x7, 0x4, 0x0, 0x3d2, 0x4, 0x4, 0xfe9, 0xffffff00, 0x40, 0x2, 0x4, 0x3, 0x9, 0x3f, 0x101, 0x7, 0x80000001, 0x0, 0x1000, 0x4c33, 0x7fff, 0x7, 0x8db, 0x4, 0x8, 0x400, 0x925e, 0x7, 0x7, 0x0, 0x7f, 0x1f, 0x6, 0x1, 0x4, 0x4000000, 0x9, 0x4, 0x0, 0x3ff, 0x4, 0x401, 0xba, 0x20, 0x1, 0xfffffffe, 0x401, 0x3ff, 0x7, 0x10000, 0xffffffff, 0x1ff, 0x5, 0x3ff, 0x1, 0x1ff, 0x5, 0x9, 0x5, 0x6, 0xba0c, 0x8d, 0xffffff27, 0x5, 0xfffffff7, 0x2, 0x8, 0x9, 0x0, 0x400, 0x101, 0x3f, 0x7ff, 0x3c0028a5, 0x80, 0x10001, 0x8001, 0x4, 0xfffffffb, 0x1, 0x4, 0x5, 0x0, 0x10001, 0x400, 0x1, 0x6, 0x7fff, 0x777b, 0x7, 0x8000, 0xd9a, 0x10001, 0x5a, 0x8001, 0x6, 0xffffffc0, 0x4, 0x3, 0x40, 0x9, 0x10001, 0x2, 0xb76, 0x6, 0x39516a69, 0x100, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x400, 0x0, 0x3ff, 0x6, 0x7, 0x0, 0x9, 0xcb, 0x80000001, 0x5, 0x5, 0x9, 0x1000, 0x9, 0x5, 0x7, 0x6, 0x6, 0x811f, 0x48, 0x6, 0x10001, 0x3d95cad9, 0x2, 0x94, 0x6, 0x4791, 0xb37, 0x1, 0x1, 0x5b, 0xff, 0x7, 0x3, 0x2, 0x800, 0x80, 0x8000, 0x1c0000, 0x200, 0x50, 0xff, 0x81, 0x10000, 0x7f, 0x4, 0x7, 0x9687, 0x2, 0x2, 0xffffffff, 0x400, 0x4df, 0x8000, 0x7, 0x2, 0xffffffff, 0x1f, 0x8, 0x7, 0x4d73, 0x5, 0x6, 0x38, 0x1, 0x6, 0x7, 0xfffffffd, 0x7, 0x1, 0x4, 0x8, 0x0, 0x8001, 0x81, 0x10001, 0x68d, 0x33, 0x2, 0xfffff4e4, 0x1, 0x4, 0x1ff, 0x401, 0x4, 0x400, 0x200, 0xa4, 0xffffffff, 0xfffffffd, 0x3, 0x3, 0x8, 0xfffeffff, 0x9, 0x77, 0x6612, 0x400, 0x540, 0x1, 0x6, 0x6, 0x10001, 0xffffffff, 0x400, 0x7fff, 0x9781, 0xe7d5, 0xa, 0x24, 0x5bc, 0x5260, 0x200, 0x1, 0x10001, 0x8000, 0x4, 0x3, 0x1, 0x92, 0x1, 0x2, 0x1, 0x809d, 0x1000, 0x0, 0x3, 0x1, 0x3ff, 0x3, 0x722, 0x5, 0xfffffffd, 0xc2, 0xffff, 0x4, 0xd6, 0xffff, 0xffff52db, 0x400, 0x5cc, 0x3f, 0x7, 0x6, 0x3, 0x1f, 0x2, 0xfffffff7, 0x19, 0x1, 0x2, 0x4, 0x401, 0x1f, 0x1f, 0x89d, 0x1, 0x5, 0x6, 0x759ed227, 0xfffffff9, 0x80000000, 0xb82, 0x80000001, 0x9, 0x8, 0x7, 0xffffffff, 0x9, 0x2, 0x5, 0xcd4e, 0x7, 0x7fffffff, 0xfff, 0x2, 0x3, 0x200, 0x9, 0x3ff, 0x10001, 0x1ff, 0x6, 0x200, 0x7fffffff, 0x7fff, 0xbd3e, 0x6, 0x6, 0x7, 0xfffffe01, 0x10000, 0x80, 0xf, 0x6, 0x9, 0x1, 0x8, 0x85, 0x6, 0x8, 0x4, 0x0, 0x1, 0x9, 0x8, 0xfffffff7, 0x9, 0x2, 0xcb000000, 0x2, 0x4, 0x7, 0x7fffffff, 0x4, 0x3, 0x401, 0x569, 0x6, 0x0, 0x0, 0x81, 0x7ff, 0x2a, 0x1ff, 0x8, 0x10001, 0x101, 0x3, 0x4, 0x6, 0x91800000, 0x9, 0x20, 0xbdcb, 0x7f, 0x5, 0x9, 0x101, 0x8000, 0x0, 0x6, 0x8, 0x8000, 0x4, 0x5, 0xf49, 0x401, 0x10000, 0x7fff, 0x3, 0x6, 0x635, 0x100, 0x80, 0x7ff, 0x4, 0x6, 0x10001, 0x3, 0x1, 0xa7, 0x3, 0xffffffff, 0xb2, 0x0, 0x0, 0x8fe, 0x501, 0x3, 0x2, 0x2, 0x1000, 0x8, 0x9, 0xa2e9, 0x1, 0x7ff, 0x400, 0x87cc, 0x1, 0x3f, 0x4, 0x8001, 0x2, 0x3, 0xd391, 0x80000001, 0xd7, 0x0, 0x9, 0x8c91, 0xe5, 0x3, 0x4, 0x3, 0x80000001, 0x3f, 0x40, 0x401, 0xf596, 0x1, 0x13, 0x10001, 0x5, 0x2, 0x8000, 0x0, 0x6, 0x6, 0xc9a13c00, 0x0, 0x3, 0xffffffc0, 0x800, 0x9, 0x627e8cac, 0x3, 0x4, 0x4, 0x1, 0x3, 0x10001, 0x10000, 0x3, 0x7, 0xe71f, 0x8001, 0x8001, 0x81, 0x5, 0x3f, 0x7f9, 0x401, 0x3f, 0x0, 0x6, 0x557, 0x8, 0x7, 0x7fff, 0x2da, 0x1f, 0x8001, 0x81, 0x75f9, 0x0, 0x4, 0xa00a, 0x0, 0x81, 0xbe68, 0x549, 0x1, 0x2, 0xffffffbb, 0x80000000, 0xffffffff, 0xfff, 0x4, 0x8, 0x6, 0x6, 0xffffff55, 0x7, 0x5, 0xff, 0x1f, 0x7f, 0x80, 0x1f37b214, 0x6, 0x2, 0x95, 0x3ff, 0x0, 0x0, 0x4, 0x10000, 0x0, 0xfffffe00, 0x9, 0x8000, 0x7, 0x3, 0x200, 0x0, 0x783, 0x6, 0x8, 0x0, 0x5, 0xf4, 0x7, 0x2, 0x5, 0x7, 0x3, 0x7fff, 0x6, 0x983d, 0x8, 0x2, 0x8, 0xeb1, 0x81, 0x5, 0x8, 0x4, 0x80000001, 0x8, 0x81, 0x0, 0x2, 0x7fffffff, 0x0, 0x3, 0x8000, 0x5, 0x8, 0xffff180c, 0x3, 0x4, 0xfffffeff, 0x9, 0xfffff801, 0xfffffffd, 0x6, 0x9, 0x0, 0xd020, 0x2f94d60e, 0x5, 0x8, 0x3, 0x6, 0x80, 0x1, 0x5, 0x7, 0x6, 0x7d, 0x4, 0x9, 0x6, 0x80000001, 0x4, 0x100, 0x78b89687, 0x3ff, 0x80, 0x8000, 0x46, 0x8000, 0x6, 0x0, 0x10000, 0x7, 0x7f, 0x6fd0, 0x1, 0xffffffff, 0x0, 0x401, 0xfffffffe, 0x8, 0x7fffffff, 0x7, 0x1, 0x4, 0x1fe, 0x1, 0x1f, 0x80, 0x80000001, 0x37a, 0x31f58cb5, 0x1, 0x7, 0x0, 0x7, 0x5, 0x10000, 0x5, 0x7, 0x9, 0x4, 0x2, 0x10001, 0x1, 0x3f, 0x2, 0x0, 0x40, 0x94c, 0x4, 0xfff, 0x12d0, 0x7, 0x401, 0x0, 0x6, 0x1, 0x7, 0x1000, 0x50, 0xe0000, 0x400, 0x7, 0x210, 0x3, 0x5, 0x3, 0x3, 0x7, 0x78, 0x7, 0x2, 0x7fffffff, 0x9, 0x7, 0x8ae00, 0xfffffffb, 0x2, 0x0, 0xb2a0, 0x0, 0x2, 0x7, 0x0, 0x6, 0x9d37, 0x5, 0x1000, 0x5, 0x0, 0x1, 0x2, 0x44, 0x88, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x6, 0x20, 0x3f, 0x7, 0x3d3, 0x4, 0x800000, 0x1000, 0x81, 0x2f, 0x1c6a, 0x80, 0xfffffffc, 0x1000, 0x9, 0x1, 0x40, 0x400, 0x6, 0x8000, 0x401, 0xad62, 0x2, 0x401, 0x9c69, 0x26e, 0x2, 0x101, 0x5, 0x6, 0x9, 0x6, 0x2, 0x8f1, 0x1, 0xfffffffe, 0x2, 0xc4d000, 0xa706, 0x6, 0x8a2, 0x5c, 0xffff, 0x7bd8953a, 0x9, 0xc20, 0x7f, 0x1000, 0x6, 0x3ff, 0xd0ac, 0x8, 0xd9d8, 0xff, 0x43, 0xfffff001, 0x9, 0x2, 0x2, 0x100, 0x4, 0x9, 0x2, 0x8, 0xff, 0x4, 0x8, 0x5, 0x9, 0x9, 0x80, 0x9, 0x7, 0xe88a, 0xc935, 0x1ff, 0xd, 0xdf8, 0x1, 0x45, 0x1, 0x5, 0x9, 0x5, 0x0, 0x3, 0xf7f3, 0x9, 0x47, 0x30, 0x1f]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:57:22 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x401c5820, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000080)={0xf}) 03:57:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x7) 03:57:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) 03:57:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x5, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:22 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x309, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2585.648338] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2585.651029] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2585.652388] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:57:32 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x8, 0x1, 0x8, 0xf}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf78, 0x0, 0x0, 0x1, 0x1}}) 03:57:32 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 03:57:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000080)={0xf}) 03:57:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000000)="43ec5862cc568b2ed6be0a26477348b8e3d08372d8a783ca27c2a7b040a4361086385f27c43d418b") 03:57:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x8000, '\x00', 0x0, 0x3f}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:57:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x314, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x6, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:32 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x7, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x3}, {0x6}, 0x160, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="2826962e6a24b07054da5ccfb9b084f02b8ba7fdc027a6680ce6e3119335d0c0ffa9bd3f498a1141b9b57757e69bdf3b93db74e1a5322b6191c50788584e120b0ac62ef8f17f3cdb784d8a95e888a8806ba6bc2c1a4db587245ba5f0ce5c41746bf4a10171cc108d722d243376d10cc1d23f235526b67a481e6547301afdafa6e9be925f3381bf7c32ee8a243e1188b8d475a8c3c74cae3aac730bd36a5858ffc81560", 0xa3, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1f1}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x2, "7d39f2", 0xdc, 0x40}) 03:57:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="61e2f449f062303c88ba343ea58b43b90800a2225ae0ed115479c9b1c6ebcf443c9f8eb674f5eddbf0b9d81c15e7f61fa72c25945d8885286bd2ed49d804fdcfcf6c91f7bc1ec3dcd1f2bc961e26b80148d0fcd1dca03cdb68c5c9db342daf94ff4799f6602a58964bebf9183fea583c6b970cb34224c4ce70467b756b1cb050b272c6abeac8a591ea787548ef28b94b524afadec61001d7448e5f38cfd2490db9b1899ae3cb2fd7a33126e0b2e2795b14bbd841bef129882bb1af3f308f6e3cf368d2b52fb4a0bf75fa3439a99ad7e1a85d844f9f889111c09050e840332a2a9a73fe3eb4744a21", 0xe8}, {&(0x7f00000001c0)="67a3d0961ebd92a59a1ecb9a744d7e64bdf505bb433f3a99a04bdc867f6f50944dd420d70c957a2d6d056cd39a926835688f3797a7142d4ed43ffd7c24ba61a1b094ef677d6964e3c17282eb051ac6adc55edf8bfa232a00f3b32f5b7110122e3e9c9f292aae179bc8415c2cbd6793f122558547d8697cd970acb7a9fd105d9a2dd741e8ca01c7df3befd06dc616bf197a45067c60a92d38b94d98f649e6d466e103f3f14eb58087c92ef7f541d32df69429dc7a55fe482e62f17f74cf2cbcbec99b02f5c7b3ec563b70ac1368193e31ae38f70dd08eaa6d9155bcbf914a31fc6bfff86bed1e47bd2429284954d35b301695453a8fe1b74b", 0xf8}], 0x2, 0x1ff, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:57:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xa, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:32 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000080)={0xf}) 03:57:32 executing program 1: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:57:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x31f, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2596.769053] Bluetooth: hci2: command 0x0406 tx timeout [ 2598.817049] Bluetooth: hci2: command 0x0406 tx timeout [ 2600.865045] Bluetooth: hci2: command 0x0406 tx timeout 03:57:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="d37e725764c72fc3dfaa3356a3b004676e893feec8430e7827401e32b3fa4a5b25", 0x21}, {&(0x7f00000000c0)="710cdebb13b410f81d0815af0972db37c0a46e7fb21852ccf148aa719cf95b11c2ad9c15768483b8b6d9defe3122ee94549046a3a35e773e4faccb6471888b0da2608b2b7299b5789cd197ad993e4fd90c9f33519ac9fe77da0e6019a68524698f7d5331dcac5e7fefdb2e623b25248ccec29642d3c0621bd41d3ee601c2c0ba467743e7f2d3c73390c314bbe1dec325fa190b022e5bdd94f697f2f64b96f50f4ce2b666c8425f", 0xa7}, {&(0x7f0000000180)="7198913479679a5eb0b6198a30d8c6a76887af481d5fe4f3a7edceb933cd48a4203f4e918cdadb9611664cbc4f53cced10b5afab638f37a4dcb3fed6dc342216ce7f9a2e932d2fa58621ed68d6e405e3e093d6ab7ca8c0", 0x57}, {&(0x7f0000000200)="18e6b61867eca4e53307a4b72cc0ab674d2575a148054848d9340d4f36fe59e2c9d49274c459eb7b07bbb7edb65ccc68afebd1011c73cfe3b97561282df5dc232922cec7d29d81eb3b7d1d053b0f65f8fe0d2b1dad0461ce4540537d27e1de31cebf8360198ba3508024ef894d50f0d51ce2c6242cb43a0eee35494e8cc276c59d44d0744a12bade0f2c70d7550fb9a014af3b5a25b2199902ba4840ff6bc6c3ac2b6c3a2f246e33de1698bcee88d287d38f591e6d8d9c7815f2dda7a054ac48ac63", 0xc2}, {&(0x7f0000000040)="a7aa5b78fefd9de6ae219fe30f8d61c3dccdfdb9a48fd4093e8791db1be90b11958912aa765e50e6731589c767f01a66d14ec68d6abd3e9bc1fb42e17fb2", 0x3e}, {&(0x7f0000000300)="e2d9fec3cac465e5a79b0c6db911497e82ea1fc3e85b03820b9171119229e22b6be6f3b8e117481dcd581acdcfc790617abefa79121bb5e620ab13e34175b121db3e6cf9632a6c3b6d0363475581c21df9a6e795258e1119cb79ad0f054826c3b36b41207713219560904a208b75a8c4", 0x70}, {&(0x7f0000000380)="dbcb0e37e966675aa09b7cfe8bb36b31dcca9dded36519241482202115762b669b391238e13b2b3aca27d72bbc60b2d8529354df32bc618caaa247498f3d15b90380273941b9af33320e", 0x4a}, {&(0x7f0000000400)="f0d89d397eac6937967f090f7e45227d8dac1d39b944152a951372aa431d25d797afdb7dc989ee1440b5edb8b0dfa3038cd4a99f85ab339dd9decb26bb0371d86ae0fa06d2579c4c7715cd115779ae49f892211c22afb70dd37655403a02b56abdd07bac9ec4f115e9574dc1645e17f3e01a92564819bc24d0cb2ef602f1dd5fe114ed8da741c13c080e13e9c7475992b4b1e9e9a124a8dffe86ea19", 0x9c}, {&(0x7f00000004c0)="67022dad8b4d524fbd80189e22b14e4e6f0c8d9f4e6fad127a772a65dc9550cf933f03fa01c9ec0e035215532ca1b8f0cdee6de09305f792baf68f3bf2db55bea201b2a984a074229dd9393865e8d5dc8d8aa5f32bcfba35bd638a20100bbbd2ece0be39a88dcd782a17d692fa56", 0x6e}], 0x2b) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000600)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}}}, 0x5) 03:57:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xb, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:43 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80085610, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:43 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x32a, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000080)={0xf}) 03:57:43 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:57:43 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x305, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) 03:57:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 03:57:43 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x335, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xc, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) socket$packet(0x11, 0x2, 0x300) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000180)={0x4, 0xd29d, "71e9f1", 0x6, 0x1}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c8d83, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3d, &(0x7f0000000100)=0xffffffff, 0x4) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:57:43 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:43 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000080)={0xf}) 03:57:43 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x1, 0x5, 0x3, 0x7fff, 0x14}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:57:43 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 03:57:43 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80111500, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xd, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2606.812789] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2606.814385] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2607.841084] Bluetooth: hci2: command 0x0406 tx timeout [ 2609.889079] Bluetooth: hci2: command 0x0406 tx timeout [ 2611.937007] Bluetooth: hci2: command 0x0406 tx timeout 03:57:54 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x340, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:54 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x801c581f, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000080)="dc29ea71766980cc73387f804393e584551dc942e6c87d372c633e99fdf44ec93b2c80c2723b06190f13c0d11da8463909155d8a92183c5d10d60dfa801526000cce730ad1de1ec2531a3bed60d86eda792cda5f0a29e37907eba6ce00976d287d5671f5736d342aeea5c67ee4cd410232a0ed521197a6ea83d1") r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x158100, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x4, 0x9, ')V\x00', 0x0, 0x80}) sendto(r1, &(0x7f00000001c0)="e7db14a5cb2425ddfb2ed5fb0e89ff2a7d6d8142acf84f03948c2bfb995919eb0b8dbaa632a36da7133959aaf829ee3ca1210d59b8272d6e81b95d62c34f1596bf3cbb7985016cf7bd362abee3cd7572d502c666fd63c1cd97f9fe45d7125aebd06ed9dcc2ff5ee89d2421ac0c11974e11a02e13e13cac3f9a3929c6030ec86c65303097b779e6139bb6b94de8d54a4854d292b81c03359f9e0337ccaea8411704a0860d67483998394d4a5fa1100db17a167364ac789df8dd5c7135450c255a8d5cd555d842a1fca0114effff6f9d3453358ea4c8daaa7b01c7fd96e1157d6969bdc113578c7780", 0xe8, 0x20000000, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01130403fc8a17f572f5ddcd1e71846b26e30574b178946e2432ac1da6e3b6a4e248943e1ba030a394153f5ee38620936b909599a7d234356192a6f19be37f6f"], 0x7) 03:57:54 executing program 4: pipe(&(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) 03:57:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000080)={0xf}) 03:57:54 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2fe, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:57:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xe, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x8000, 0x45) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf72, 0xfffe}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:57:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x401c5820, &(0x7f0000000080)={0xf}) 03:57:54 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80811501, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:57:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:57:54 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2fe, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2617.680448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2617.681434] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2619.699723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2619.705325] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2619.709328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2619.714971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2619.717346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2621.793039] Bluetooth: hci2: command tx timeout [ 2623.841562] Bluetooth: hci2: command tx timeout [ 2625.890036] Bluetooth: hci2: command tx timeout [ 2627.937007] Bluetooth: hci2: command tx timeout [ 2638.102442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2638.103736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2638.181723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2638.182834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:58:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x34b, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:25 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000140)={0x5, 0x5, 0x8001, 0x5, 0x5}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ieee802154', 0x40000, 0x184) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x40, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) sendfile(r1, r3, &(0x7f0000000180)=0x8001, 0x7) 03:58:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000180)) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[{0x5, 0x81}, {0x3ff, 0x5}, {0x8001, 0x3}, {0x4d8, 0xaf9e}, {0x10f, 0x79d}, {0xff, 0x8}, {0x0, 0x6}, {0x7a9, 0x2}, {0x400, 0x6}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000000)=""/122) 03:58:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) fcntl$setflags(r1, 0x2, 0x1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000500)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/225, 0xe1}], 0x3, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x21) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000400)="f7fd8a03e0fc33d9235e350b1f5986f0f625dc83ea2a109d9e0214a3a6bdbb2faf872d0fdb58bd39c96c59615d3ba54e405274465e147109871461a9ed1ef72d5e2c93a617") getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000480)=""/12, &(0x7f00000004c0)=0xc) 03:58:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000080)={0xf}) 03:58:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x8}) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0xfb, 0x89, 0x6, 0x0, 0x3, 0x200a0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x50000, 0x4, 0x2, 0x0, 0xffffffffffff0001, 0xfffffff8, 0x49, 0x0, 0x7, 0x0, 0xe40}, 0xffffffffffffffff, 0xe, r2, 0x8) 03:58:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x11, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:58:25 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x12, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:58:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000080)={0xf}) 03:58:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 03:58:25 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:25 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, 0x0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2648.594985] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2648.653532] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2648.655689] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000080)={0xf}) 03:58:35 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x285, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000180)=0xff, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x2, "68fd96", 0x5, 0x4}) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="01050000000000000046"], 0xb) write$bt_hci(r1, &(0x7f0000000000)={0x1, @set_cpb={{0x441, 0xb}, {0x1, 0x1, 0xfe, 0x0, 0x7, 0x3e, 0x1}}}, 0xf) write$bt_hci(r3, &(0x7f00000001c0)={0x1, @create_conn={{0x405, 0xd}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfe01, 0x3, 0x7, 0x58, 0x9}}}, 0x11) 03:58:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x356, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:35 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x3, 0x0, 0x0, 0x0, 0x300}}) 03:58:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x19, 0xc, 0x13, &(0x7f00000000c0)}) 03:58:35 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:58:35 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x24e, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x361, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:35 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80085610, &(0x7f0000000080)={0xf}) 03:58:35 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) syz_open_pts(r1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:58:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x4, 0x0, 0x0, 0x0, 0x300}}) 03:58:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) syz_open_pts(r1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:58:35 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(0xffffffffffffffff, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x36c, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2658.361086] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2658.361252] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2658.362657] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2658.365076] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2658.365439] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2658.368528] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2659.553040] Bluetooth: hci1: command 0x0406 tx timeout [ 2659.553070] Bluetooth: hci2: command tx timeout [ 2661.600973] Bluetooth: hci1: command 0x0406 tx timeout 03:58:46 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x3, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000080)={0xf}) 03:58:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="06000408004af50e95879a69997f90f3a39f5b127ab8703d0ebb40c3f64ac7de595066fce893ac61e24ce98a3221198e04391ef6a5f638653c5c70c7c83d62b7fd58ff2ad65c0422fc1aac3e8b40610546"], 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) close(r1) 03:58:46 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x377, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:46 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x243, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x5, 0x0, 0x0, 0x0, 0x300}}) 03:58:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) syz_open_pts(r1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:58:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x6, 0x8eb4, 0x5) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7000009, 0x80010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0x197e, 0x5, 0xfff, 0x3}}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x24916e796facec90) r4 = openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) r6 = accept4$unix(r1, 0x0, &(0x7f0000000180), 0x80000) poll(&(0x7f00000001c0)=[{r4, 0x802c}, {r5, 0x1000}, {r6, 0xa0}, {r3, 0x2004}, {r1, 0xd49}], 0x5, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x37) 03:58:47 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x382, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000080)={0xf}) 03:58:47 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:47 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x377, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2670.231375] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2670.339179] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:58:59 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x38d, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80111500, &(0x7f0000000080)={0xf}) 03:58:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x6, 0x0, 0x0, 0x0, 0x300}}) 03:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:58:59 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x5, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7fff, 0x6, 0x8, 0x5, 0x10}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 03:58:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, 0x10, 0x8, 0x70bd2b, 0x25dfdbfb, {0x1e}, [@generic="316b26d1ef71502fc71524a684a664c8b4feebafc82c1c261b58df269550abd4f81d8813f70b2f28ae99803b376d08a8192727f02debaff4647f60", @generic="e503d74b3705e807b58b5c0f449c9c2f7871a53779f28121352566f48b611c6c2f668588419a7a515615af958c1192450e14992f40c570a46945197ef96bd2"]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x54080) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:58:59 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x243, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:59 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x6, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x801c581f, &(0x7f0000000080)={0xf}) 03:58:59 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x6, 0x8eb4, 0x5) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7000009, 0x80010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0x197e, 0x5, 0xfff, 0x3}}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x24916e796facec90) r4 = openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) r6 = accept4$unix(r1, 0x0, &(0x7f0000000180), 0x80000) poll(&(0x7f00000001c0)=[{r4, 0x802c}, {r5, 0x1000}, {r6, 0xa0}, {r3, 0x2004}, {r1, 0xd49}], 0x5, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x37) 03:58:59 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x7, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:58:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x7, 0x0, 0x0, 0x0, 0x300}}) 03:58:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000200)="ae9e8e80263fd0f7e05805adfc8a68d97119b4eaeb0693794d57cc8213f5f4f9e962e0fc08196df49de5444d29e672c0f8c973574206796012aa5d3b5f753fdbac0a87ed3e297cf4b3e7c262288c7fe72004339ecd33e80477aad8bbb7838b68df8dd4f8480920498028c07fb9b56ad86483e488bc1004780f716228af3a525cefe7fcb053050266e89ea2460e01c8758a34166756522706ac44c88c70fa17011c33fbd1604d5fb6b12276c32b5e2875a79fa25cdc3c7bd6ebb5f49c08cd4fee637680051dfc80ff45085655d45c643f564b57fe8944b08423153b19f252f596f4b1") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0xfffffffffffffe8e, r2}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000e5aab0131c26351e6d534058f4bfa77f3bf33690afcb82112f2fd94429a531318fb3b6fce44e5e575a0"], 0x7) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000080)="cab44ed691bd1bfda475fd3fc302cc39aee54850a28d98c0811393c531fdd797d8b2a2ad19e295d05e8642906dcc8496d75ef35ee37c47ef57ce97b03c680b7cfc5a914d17a7a3508e1706ff26b3320ca3e44b3d355901f52d1fb7f67edbdd4dbdf24c4436f423426b5322f840ffc5560130a0f2adc1753344aef7f0fab56e9beb3b9f826798a8af8d614fae8eb2") 03:58:59 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x398, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:58:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "303927d849d3ed49aef8e0ca1bef4eab29ba53620000f26fd165f5bdf07d883482476271c3222798f1ac3a443ec388f035f189bb54c5cbc92d349c65ea557d43", 0x3d}, 0x48, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80811501, &(0x7f0000000080)={0xf}) [ 2682.053542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.054110] blk_print_req_error: 17 callbacks suppressed [ 2682.054121] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.055336] buffer_io_error: 30 callbacks suppressed [ 2682.055344] Buffer I/O error on dev sr0, logical block 8, async page read [ 2682.061746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.061783] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.061800] Buffer I/O error on dev sr0, logical block 9, async page read [ 2682.063164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.063200] I/O error, dev sr0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.063218] Buffer I/O error on dev sr0, logical block 10, async page read [ 2682.063371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.063404] I/O error, dev sr0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.063420] Buffer I/O error on dev sr0, logical block 11, async page read [ 2682.063561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.063594] I/O error, dev sr0, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.063610] Buffer I/O error on dev sr0, logical block 12, async page read [ 2682.063749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.063781] I/O error, dev sr0, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.063797] Buffer I/O error on dev sr0, logical block 13, async page read [ 2682.068046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.068083] I/O error, dev sr0, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.068100] Buffer I/O error on dev sr0, logical block 14, async page read [ 2682.068245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.068278] I/O error, dev sr0, sector 15 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.068295] Buffer I/O error on dev sr0, logical block 15, async page read [ 2682.068510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.068544] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.068560] Buffer I/O error on dev sr0, logical block 8, async page read [ 2682.068705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.068737] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2682.068753] Buffer I/O error on dev sr0, logical block 9, async page read [ 2682.069007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.114284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.140841] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 2682.141703] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2682.142337] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2682.142920] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 03 00 00 01 00 [ 2682.144396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.166524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.178873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.191134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.198966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.209433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.214434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.218832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2682.966426] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2682.968346] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2683.872978] Bluetooth: hci2: command tx timeout 03:59:10 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3a3, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xa, 0x0, 0x0, 0x0, 0x300}}) 03:59:10 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x6, 0x0, 0x0, 0x0, 0x300}}) 03:59:10 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x1000891a6, &(0x7f0000000180)="30ea2e8754c6f0c6969ac18555b10d186ae2dfc8841b7ac2c252ae1d629e67e4235df3b60ce30c67df5d7388f8e2ae75f0ceeb08993fbaca4675af031f572c9da12bededcb79ce60a8ee5c4ec004b86450e6636e0566552f811bee28c20711b0da3dd4e5f760d23a81a862f928abd5e02382328eb159a34102d0f299bb9a938357") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) syz_mount_image$nfs4(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:59:10 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xa, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:59:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0xf}) 03:59:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) writev(0xffffffffffffffff, &(0x7f00000089c0)=[{&(0x7f0000008640)="0da1f36d3d2da939a7cdffd14be265432846167515c647eb45f20c753a2e6776097a1254365adc7d6a89cfa82fccc049911bd040570e9c98d92fc9262482a13d411a5d83ed993a09e704038a122db285eb0d93cd3a0d7310367916f2a69b7297e363cf15fd32b090cf5aa162b680bf62c3624bdfd52d723a2d454d9eb52129b51e7a228d4d8a3712269f1513e763beed1386d01a91aae16a09f9486c30c88975e10f8fbde7e91deb1946c07513348095054ed3a0f91c96e888846d2c725d81cdca2550a15a2c1a9401bd530cbff0820ba8481e598414a7967161871299", 0xdd}, {&(0x7f0000008740)="40b5d48fdc0dd1599f5226d660cd39ff86381a4dfcd63ca5eda5465bf08766af84459efb521479f280202b3ea76db3f4cebd32e429c92b19f78f77eec94edc892af62d0710c9bf1b7654919857295343e96a25855dfc3c79b9148990009063b97cf7093e981f8c3cbea6903924bc1596f69f6f65c1b82f8b65dc8bc85759b5f2e36651e3f90cae47eebacaeef49ee81f5eac49a8c5f17d7388194b2fe47d3b9faf003aa942a6ed5d3844ed62b130e077eeb2795b5246ab31cdea974787c3f26a9afcb03849cf3c008c381b618f50a4b06e086b81669d9a57aadc3a4cd8c88715c686d1ff3ea648fe28fde1c98e0833dbbf2d54", 0xf3}, {&(0x7f0000008840)="90111c8352cf83310e29aadfc7c8a389aa19a495e4aada719b44ff4822aaea259cb8f5f31b7017bf46a4258100febc0c15ed26d069aafcf3369db17a7610c2841536521e0fb6caf5247e8bf3bfff294e776a7a713781227850ced4c99c494fae134c7684872a35f1c436e0f338a109c774b24957e7c0f54861385ecb1bd93b779b0bf572e76c9ffb992238e90dac926bf1d75964aed7abbc9dde38fadb66a941f7f43afb2f051d5c15f19970018003a16fe7fd57c27bfba5c7cdba804092b7de3fc68c016a12e4526d22914b3666f58c509236d075a9743949dd782dcaea46bcdf727aa32bc2fd01e888143e1d69b3172e6ab14c3ef0cd", 0xf7}, {&(0x7f0000008940)="781166a62cb0e17643769c96ebb8bd5256e1baa26c4b0ab6b131973932421e21b07afa587284f3b412ec01147263e67c548e050a940710b6feb6692fa598554bf3f821fa1a53f59d7294", 0x4a}], 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000008540)=""/209) bind$bt_hci(r1, &(0x7f0000000480)={0x1f, 0x1, 0x3}, 0x6) clock_gettime(0x0, &(0x7f0000008480)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000008240)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f00000001c0)=""/205, 0xcd}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)}], 0x5, &(0x7f0000000540)=""/37, 0x25}, 0x10001}, {{&(0x7f0000000580)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/51, 0x33}], 0x2}, 0xf3c0}, {{&(0x7f0000001680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/202, 0xca}, {&(0x7f0000002800)=""/91, 0x5b}, {&(0x7f0000002880)=""/197, 0xc5}, {&(0x7f0000002980)=""/136, 0x88}, {&(0x7f0000002a40)=""/122, 0x7a}], 0x6, &(0x7f0000002b40)=""/210, 0xd2}, 0xfffffffc}, {{&(0x7f0000002c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002cc0)=""/217, 0xd9}, {&(0x7f0000002dc0)=""/75, 0x4b}, {&(0x7f0000002e40)=""/73, 0x49}, {&(0x7f0000002ec0)=""/130, 0x82}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/215, 0xd7}, {&(0x7f0000004080)=""/209, 0xd1}], 0x7, &(0x7f0000004200)=""/22, 0x16}, 0x101}, {{&(0x7f0000004240)=@isdn, 0x80, &(0x7f00000043c0)=[{&(0x7f00000042c0)=""/249, 0xf9}], 0x1, &(0x7f0000004400)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005400)=""/61, 0x3d}, {&(0x7f0000005440)=""/33, 0x21}, {&(0x7f0000005480)=""/25, 0x19}, {&(0x7f00000054c0)=""/220, 0xdc}], 0x4, &(0x7f0000005600)=""/92, 0x5c}, 0x8}, {{&(0x7f0000005680)=@nfc, 0x80, &(0x7f0000006c80)=[{&(0x7f0000005700)=""/82, 0x52}, {&(0x7f0000005780)=""/129, 0x81}, {&(0x7f0000005840)=""/157, 0x9d}, {&(0x7f0000005900)=""/103, 0x67}, {&(0x7f0000005980)=""/93, 0x5d}, {&(0x7f0000005a00)=""/149, 0x95}, {&(0x7f0000005ac0)=""/241, 0xf1}, {&(0x7f0000005bc0)=""/146, 0x92}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x9, &(0x7f0000006d40)=""/4096, 0x1000}}, {{&(0x7f0000007d40)=@nl=@unspec, 0x80, &(0x7f0000007f00)=[{&(0x7f0000007dc0)=""/113, 0x71}, {&(0x7f0000007e40)=""/130, 0x82}], 0x2, &(0x7f0000007f40)=""/228, 0xe4}, 0x346}, {{&(0x7f0000008040)=@can, 0x80, &(0x7f0000008180)=[{&(0x7f00000080c0)=""/95, 0x5f}, {&(0x7f0000008140)=""/37, 0x25}], 0x2, &(0x7f00000081c0)=""/111, 0x6f}, 0x5}], 0x9, 0x10003, &(0x7f00000084c0)={r2, r3+60000000}) bind$bt_hci(r4, &(0x7f0000008500)={0x1f, 0x3, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000008a00)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "4c4313d1e4e9cc0183d037906c9184a9"}}}, 0x16) 03:59:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x6, 0x8eb4, 0x5) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7000009, 0x80010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0x197e, 0x5, 0xfff, 0x3}}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x24916e796facec90) r4 = openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) r6 = accept4$unix(r1, 0x0, &(0x7f0000000180), 0x80000) poll(&(0x7f00000001c0)=[{r4, 0x802c}, {r5, 0x1000}, {r6, 0xa0}, {r3, 0x2004}, {r1, 0xd49}], 0x5, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x37) 03:59:10 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xb, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="011304fbff0000"], 0x7) recvmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000280)=""/136, 0x88}], 0x3, &(0x7f0000000340)=""/184, 0xc7}, 0x800}, {{&(0x7f0000000440)=@nl=@unspec, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f0000002040)=""/233}, {&(0x7f0000001d80)=""/24}, {&(0x7f0000002140)=""/130}], 0x1, &(0x7f0000000600)=""/201, 0xc9}, 0x9}, {{&(0x7f0000000700)=@qipcrtr, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/106, 0x6a}, {&(0x7f0000000800)=""/51, 0x33}], 0x2, &(0x7f0000000880)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001880)=@nfc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001900)=""/254, 0xfe}, {&(0x7f0000001a00)=""/25, 0xfffffffffffffe55}, {&(0x7f0000001a40)=""/237, 0xed}, {&(0x7f0000002200)=""/148, 0x8e}, {&(0x7f0000001c00)=""/151, 0x97}, {&(0x7f0000001cc0)=""/148, 0x94}], 0x6, &(0x7f0000001e00)=""/97, 0x61}, 0x1}], 0x4, 0x1, &(0x7f0000001f80)={0x0, 0x3938700}) 03:59:10 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3ae, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xb, 0x0, 0x0, 0x0, 0x300}}) 03:59:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x7) 03:59:10 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xc, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0xf}) 03:59:10 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x6, 0x0, 0x0, 0x0, 0x300}}) 03:59:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000380)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xdf71, 0x1, 0x7fff, 0x1ff}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='timers\x00') bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5b, 0x43, 0x0, 0xba, 0x6, 0x3, 0x3, 0x0, 0x37, 0x40, 0x2c2, 0x4, 0xd88f, 0x38, 0x2, 0x2, 0x4, 0xfff7}, [{0x70000000, 0x8, 0x1, 0x79, 0xce6, 0x2, 0x6, 0x7}], "9a4574ae00b576abab8f71f0ccbeea897eb0ab5d41d2d56bdaa654429df3d9fda7ba0d72a73d1316cc6ef9fd418d339233c23aafcb", ['\x00', '\x00']}, 0x2ad) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000ac0)={'wg0\x00', &(0x7f0000000a80)=@ethtool_link_settings={0x4c, 0xffff0001, 0x9, 0x76, 0x5, 0x0, 0x4, 0xf9, 0x7f, 0x7, [0x4, 0xe000, 0x8, 0xf06a0fc3, 0x1, 0x1, 0x2f3d, 0xfff]}}) 03:59:10 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xd, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:10 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x6, 0x0, 0x0, 0x0, 0x300}}) 03:59:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000080)={0xf}) 03:59:10 executing program 1: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="d4264dc5f369eca87546483e7654bb52e37afb01089baabb"], 0x7) 03:59:10 executing program 6: syz_open_dev$tty1(0xc, 0x4, 0x1) 03:59:10 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xe, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2695.137023] Bluetooth: hci2: command tx timeout [ 2697.185046] Bluetooth: hci2: command tx timeout 03:59:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x6, 0x8eb4, 0x5) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7000009, 0x80010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0x197e, 0x5, 0xfff, 0x3}}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x24916e796facec90) r4 = openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) r6 = accept4$unix(r1, 0x0, &(0x7f0000000180), 0x80000) poll(&(0x7f00000001c0)=[{r4, 0x802c}, {r5, 0x1000}, {r6, 0xa0}, {r3, 0x2004}, {r1, 0xd49}], 0x5, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x37) 03:59:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x0, 0x2}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="e474c072fd767fc41ec1284f29fae0b0e84aada9d8b311eab20afd89060fed691451362aa627319e422c8b7ebcaa7cc64b660b1ade61640a7fc885ca9a24a8e27ec86bd6f500de6e8a065d07dbc4eae80671a3f754704db8ed38693e157c32c9d845925349f434bb903a025215bad54d8caeb9687b3121e4622e7ad0fc8d1a062401e8f962436e95becccf69dbcb290c6123615d320b5de3781f1b743279ad945a28a0f31410f60883d627789ab61964f6b7a28b4eb756b311b88a97b0c2a8325558b2ef197541e3f617847347eff6ac41ef05d64e45b5375130b294d5867a8684f40f8c1c0e82") 03:59:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xc, 0x0, 0x0, 0x0, 0x300}}) 03:59:21 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:21 executing program 6: syz_open_dev$tty1(0xc, 0x4, 0x1) 03:59:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2403, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0x4, 0x4}, 0x6) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000100), &(0x7f0000000080)=0x10) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="a2fc", @ANYRES16=r5, @ANYBLOB="00082dbd7000ffdbdf255e00000008000300", @ANYRES32=0x0, @ANYBLOB="050019010e00000005001801050000000800270003000000050018012700000008002600a4150000"], 0x44}, 0x1, 0x0, 0x0, 0x20040081}, 0x2008014) 03:59:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000080)={0xf}) 03:59:21 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3b9, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2704.417610] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2704.419674] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2704.427444] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2704.432604] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2705.696992] Bluetooth: hci2: command tx timeout [ 2707.745026] Bluetooth: hci2: command tx timeout 03:59:33 executing program 0: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="d4264dc5f369eca87546483e7654bb52e37afb01089baabb"], 0x7) 03:59:33 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3c4, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x7, "ae8e7f", 0x4, 0x81}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 03:59:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x6, 0x8eb4, 0x5) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7000009, 0x80010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0x197e, 0x5, 0xfff, 0x3}}) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x24916e796facec90) r4 = openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) r6 = accept4$unix(r1, 0x0, &(0x7f0000000180), 0x80000) poll(&(0x7f00000001c0)=[{r4, 0x802c}, {r5, 0x1000}, {r6, 0xa0}, {r3, 0x2004}, {r1, 0xd49}], 0x5, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x37) 03:59:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xd, 0x0, 0x0, 0x0, 0x300}}) 03:59:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 03:59:33 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xb, 0x0, 0x0, 0x0, 0x300}}) 03:59:33 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x11, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:33 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x12, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x3}) 03:59:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:59:33 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x3, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:33 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xe, 0x0, 0x0, 0x0, 0x300}}) 03:59:33 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3cf, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4}) 03:59:33 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x4, [0x906e, 0xe1], 0x51}, 0x10) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x0, 0x745, 0x900, 0x5, 0x8, 0x7ff}}}, 0x12) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01102007fefffffffff4a6774b75d456994e03ca1510c9db66a8123018aab5c02a33d3d68d83489ce27ebbbc47d1b1c28e782a0dc0e716d2e2164ca9292120000000000000000000000000005eac627f3ae1f372f391cd3f7bfbf8db3d48"], 0xb) [ 2716.572398] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2716.574954] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2717.792984] Bluetooth: hci1: command 0x0406 tx timeout [ 2717.856961] Bluetooth: hci2: command tx timeout [ 2719.841205] Bluetooth: hci1: command 0x0406 tx timeout 03:59:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) fsync(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'sit0\x00'}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) signalfd4(r4, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x4e70, "fa6cfb", 0x3f, 0x5}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:59:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:crack_db_t:s0\x00', 0x20, 0x0) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0x1}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0128200705000000000000498a968c2ab8b4f4353e1c02daf9198de815b378d4f527f932fd6e8393cabe4f283750226597d48e4a154da8cbfbbdef150c29fe9b0f4fd8db86be15f25d49e795220ba17cada1a688c79c4f6bcbdc8c16aede3daaa62ba9bd277032a1dfeab7680580598d199d4dabf9b0c3ccb039837825f989a4b7bebb883a23a3c9bc2b79771c40f938002c5fc5ca8fbdff8315d739344cf9f0e8c206c55a9391edd3e87b255fdbcf1ea6d532b81d5a"], 0xb) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) fchown(r4, r5, 0xffffffffffffffff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '-[$%\\'}], 0xa, "f57daa7d2409c3be1bd389bea81a1aca7c6418660f5681e7cd5be65c75cf5b3ba0b29a2ce44c9f0985ee795b8749be010fda90f8808e1b38ebba0f240aaeda061de88e5f86464c"}, 0x58) 03:59:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4}) 03:59:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3da, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:45 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) fsync(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'sit0\x00'}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) signalfd4(r4, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x4e70, "fa6cfb", 0x3f, 0x5}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:59:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x5}) 03:59:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 03:59:45 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x4, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4}) 03:59:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x11, 0x0, 0x0, 0x0, 0x300}}) 03:59:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4}) 03:59:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x6}) 03:59:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3e5, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x12, 0x0, 0x0, 0x0, 0x300}}) 03:59:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3f0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2728.341512] audit: type=1400 audit(1753156785.927:20): avc: denied { relabelto } for pid=22090 comm="syz-executor.1" name="HCI" dev="sockfs" ino=43290 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crack_db_t:s0 tclass=bluetooth_socket permissive=1 [ 2728.990094] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.007053] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.068367] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.070705] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.073372] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.075927] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.078768] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.081111] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.082865] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.086192] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2729.088546] Bluetooth: hci0: Opcode 0x0c03 failed: -4 03:59:55 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x20c, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3da, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:crack_db_t:s0\x00', 0x20, 0x0) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0x1}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0128200705000000000000498a968c2ab8b4f4353e1c02daf9198de815b378d4f527f932fd6e8393cabe4f283750226597d48e4a154da8cbfbbdef150c29fe9b0f4fd8db86be15f25d49e795220ba17cada1a688c79c4f6bcbdc8c16aede3daaa62ba9bd277032a1dfeab7680580598d199d4dabf9b0c3ccb039837825f989a4b7bebb883a23a3c9bc2b79771c40f938002c5fc5ca8fbdff8315d739344cf9f0e8c206c55a9391edd3e87b255fdbcf1ea6d532b81d5a"], 0xb) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) fchown(r4, r5, 0xffffffffffffffff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '-[$%\\'}], 0xa, "f57daa7d2409c3be1bd389bea81a1aca7c6418660f5681e7cd5be65c75cf5b3ba0b29a2ce44c9f0985ee795b8749be010fda90f8808e1b38ebba0f240aaeda061de88e5f86464c"}, 0x58) 03:59:55 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x5, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x7}) 03:59:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3fb, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 03:59:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0113044a000000ad13b15cfda429c863eaaff6bb6725599b3b712811af1ca544bd3b84b8be2251ab417ab88e81dcbc9171c3515915beebaa8c1736b0ca5e97063dafb58a7e2bd96322f1"], 0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"37b1cc4c2e8e33611a504cf4a3caf690", 0x0, 0x0, {0x7, 0x401}, {0x1850000000000, 0x3}, 0x1, [0xa00000, 0x2, 0x1, 0x7, 0x4, 0x9, 0x0, 0x6, 0x2a, 0xdf, 0x6, 0x8000, 0x0, 0x1000, 0x1, 0x20]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"591640d3a3b11bb3ba339bcc5803b3a6", r3, 0x0, {0x40, 0x8}, {0x2, 0xa286}, 0x1, [0x5, 0x4, 0x80, 0x2, 0x7, 0xffffffffffffff0f, 0x7f, 0x81, 0x7fff, 0x2, 0x3, 0x800, 0x0, 0x7ff, 0x234, 0xfffffffffffffbff]}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x80, "51e184", 0x20, 0x7f}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) 03:59:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xa}) 03:59:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x7}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011304030000001a00bb689b0e5833ff36b867b65f60874655eb83949c772e5b01c1f13067de8b257d05fe8e5c3336cf2f6b2c30e2fb38dc68cac3112d91fdcef00eaab0c96965d8c3649e9fc163c0155b9f9e3e497ea6d192fec41a5c00281eb77e1bfb141ed68401e40dbbd5"], 0x7) 03:59:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x406, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xb}) 03:59:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xb64, 0x0, 0x0, 0x300}}) 03:59:56 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x6, 0xdf71, 0x0, 0x0, 0x2}}) 03:59:56 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 03:59:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x7}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011304030000001a00bb689b0e5833ff36b867b65f60874655eb83949c772e5b01c1f13067de8b257d05fe8e5c3336cf2f6b2c30e2fb38dc68cac3112d91fdcef00eaab0c96965d8c3649e9fc163c0155b9f9e3e497ea6d192fec41a5c00281eb77e1bfb141ed68401e40dbbd5"], 0x7) 03:59:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x411, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2739.159582] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2739.161590] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2739.211172] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2739.212816] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2739.213950] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 2739.217657] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2739.219768] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 2740.449088] Bluetooth: hci3: command 0x0401 tx timeout [ 2740.450367] Bluetooth: hci2: command tx timeout [ 2742.497075] Bluetooth: hci2: command tx timeout [ 2742.499135] Bluetooth: hci3: command 0x0401 tx timeout [ 2744.545024] Bluetooth: hci2: command 0x0406 tx timeout 04:00:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xc}) 04:00:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x640b, 0x0, 0x0, 0x300}}) 04:00:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x7, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:07 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x41c, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:07 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x1f6, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x7}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011304030000001a00bb689b0e5833ff36b867b65f60874655eb83949c772e5b01c1f13067de8b257d05fe8e5c3336cf2f6b2c30e2fb38dc68cac3112d91fdcef00eaab0c96965d8c3649e9fc163c0155b9f9e3e497ea6d192fec41a5c00281eb77e1bfb141ed68401e40dbbd5"], 0x7) 04:00:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:07 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000100)=0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_map}}) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x4, 0x3}, 0x6) 04:00:07 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r2, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xd}) 04:00:07 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xa, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:00:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x2004, 0x73, 0x20, 0x1}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:00:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2040, 0x21, 0x10}, 0x18) write$bt_hci(r1, &(0x7f0000000100)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc8}}}, 0x6) 04:00:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0xb64, 0x0, 0x300}}) 04:00:07 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x427, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xb, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x188, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xe}) 04:00:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x7) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x4e, [0x800]}, 0x10) 04:00:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x640b, 0x0, 0x300}}) 04:00:07 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xc, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:07 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x129, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x9, 0x3}, {0xf7}, {0x80, 0x7}, {0xff, 0x2}, {0x0, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0xf7, 0x2}, {0xa9, 0x7}, {0x5}, {0x7e, 0x4}, {0x2}, {0x1, 0x2}, {0xb5, 0x6}, {0x6, 0x3}, {0x0, 0x2}, {0x3, 0x2}, {0x8, 0x4}], "b590d8a1451d5ac4"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x2}, {0x4, 0x5}, {0x17}, {0x5}, {0xb8, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x5d, 0x2}, {0x7}, {0x9a, 0x1}, {0x0, 0x5}, {0x53, 0x2}, {0x4, 0x3}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x6}], "adc2dba499a01885"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x0, 0x7}, {0x9, 0x6}, {0x1}, {0x0, 0x7}, {0x0, 0x4}, {0xaf}, {0xff, 0x3}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x7, 0x5}, {0x7, 0x2}, {0x8, 0x7}, {0x1, 0x6}, {0x8, 0x1}, {0x0, 0x6}], "e719d5689db02ae8"}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000834}, 0x200088c1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="bcd8ce1327377af84953b6c3bd5eadc6bdd5984a0729658155b78452de6532fe7ec291041bf10084b0d95bc3d01d782d15b77680f0985aecf0f147512ec7cda0eafe1183b7bf8d9f73611f2694b0d36a602c04bcb32ca07912833274a561aeaba2090bd90081065073d8473e6ed824d8e6bc8aaa14c5b51eec1aba55c3c0630d50ca0a7d43"], 0x7) 04:00:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:00:08 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x17d, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2751.777028] Bluetooth: hci2: command 0x0406 tx timeout [ 2753.824944] Bluetooth: hci2: command 0x0406 tx timeout [ 2755.872950] Bluetooth: hci2: command 0x0406 tx timeout 04:00:16 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xd, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x4, 0x2}, 0x6) fchmod(0xffffffffffffffff, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x9, "8ccb5e", 0x3, 0x14}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000001c0)={0x1, 0x7ff, "e6f2b4", 0x4, 0x3}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01130403000040"], 0x7) 04:00:16 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x432, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0xb64, 0x300}}) 04:00:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x11}) 04:00:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x178) 04:00:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x404) 04:00:16 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x427, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x178) 04:00:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x12}) 04:00:16 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2760.109625] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2760.110719] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2760.110980] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2760.114708] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2760.116474] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2761.248978] Bluetooth: hci2: command 0x0406 tx timeout [ 2761.312958] Bluetooth: hci1: command 0x0406 tx timeout [ 2761.376930] Bluetooth: hci4: command 0x0406 tx timeout 04:00:26 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xe, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x640b, 0x300}}) 04:00:26 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x13b, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xc373, 0x200000) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:00:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x178) 04:00:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:00:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x101}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:00:26 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x43d, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2770.977097] Bluetooth: hci2: command 0x0406 tx timeout [ 2773.025038] Bluetooth: hci2: command 0x0406 tx timeout 04:00:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:00:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x448, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x1) ioctl$KDSETLED(r2, 0x4b32, 0x80000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:00:36 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xf, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:36 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0x0, 0x4}}}, 0x7) 04:00:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300, 0xb64}}) 04:00:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x1) ioctl$KDSETLED(r2, 0x4b32, 0x80000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:00:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, @in_args={0x1}}, './file0\x00'}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x2], 0x401}, 0x10) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1000) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:00:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300, 0x640b}}) 04:00:36 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x104, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:36 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x11, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:00:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) [ 2779.232830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.233563] blk_print_req_error: 11 callbacks suppressed [ 2779.233572] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.234821] buffer_io_error: 14 callbacks suppressed [ 2779.234829] Buffer I/O error on dev sr0, logical block 0, async page read 04:00:36 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x104, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2779.254421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.255019] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.255908] Buffer I/O error on dev sr0, logical block 1, async page read 04:00:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x453, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2779.261038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.261494] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.262320] Buffer I/O error on dev sr0, logical block 2, async page read [ 2779.266061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.266537] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.267229] Buffer I/O error on dev sr0, logical block 3, async page read [ 2779.268380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.268851] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.269646] Buffer I/O error on dev sr0, logical block 4, async page read [ 2779.274484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.275144] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.275990] Buffer I/O error on dev sr0, logical block 5, async page read [ 2779.285549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.286167] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.286955] Buffer I/O error on dev sr0, logical block 6, async page read [ 2779.290121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.290579] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.291362] Buffer I/O error on dev sr0, logical block 7, async page read [ 2779.294035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.294491] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.295258] Buffer I/O error on dev sr0, logical block 0, async page read [ 2779.297843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.298346] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2779.299071] Buffer I/O error on dev sr0, logical block 1, async page read [ 2779.305380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.308132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.308712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.312660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.315014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.315618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.318980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.319580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.323015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.323642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.327103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.327717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.333038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.333640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.336702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.339495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.343580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.345551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.348489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.348636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.348770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.351250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.351501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.351648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.351790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.355457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.355605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.355746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.356130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.357983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.359001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 04:00:36 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x108, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000004) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) write$bt_hci(r2, &(0x7f0000000180)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc9, 0x1f}}}, 0x8) 04:00:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x45e, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2779.386553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.391010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.391640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.399206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.399800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.404054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2779.404629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 04:00:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000080)={0xf}) [ 2780.000163] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2780.341736] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2781.153027] Bluetooth: hci2: command 0x0406 tx timeout [ 2783.201915] Bluetooth: hci2: command 0x0406 tx timeout [ 2785.249022] Bluetooth: hci2: command 0x0406 tx timeout 04:00:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x12, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:00:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x8}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) close(r2) 04:00:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:00:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000080)={0xf}) 04:00:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:00:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x2, 0x1}}}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:00:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x469, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:00:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 04:00:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000080)={0xf}) 04:00:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:00:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x474, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:00:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc9}}}, 0x7) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:00:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:00:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x2, 0x0, 0x2}}) [ 2792.720466] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2793.952958] Bluetooth: hci2: command 0x0406 tx timeout [ 2796.000944] Bluetooth: hci2: command 0x0406 tx timeout [ 2798.049005] Bluetooth: hci2: command 0x0406 tx timeout [ 2800.097221] Bluetooth: hci2: command 0x0406 tx timeout [ 2802.144958] Bluetooth: hci2: command 0x0406 tx timeout 04:01:00 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0xc2, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:01:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:00 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x3, 0x0, 0x2}}) 04:01:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) r1 = socket$inet6(0xa, 0x6, 0x367) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000080)=0x2c) 04:01:00 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x47f, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:00 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x474, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0x80, 0x0, 0x205, 0x4}}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/208) 04:01:00 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/157) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) tee(0xffffffffffffffff, r2, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:01:00 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:01:00 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/157) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) tee(0xffffffffffffffff, r2, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:01:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001bc0), 0x208082, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001c00)={0x8, 0xffff, 0x100000001, 0x4, 0x8}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:01:00 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x48a, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:00 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x4, 0x0, 0x2}}) 04:01:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2dbfcbdb586a6e5581090c3cdc4f0000"], 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000080)=""/196, &(0x7f0000000180)=0xc4) 04:01:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:01:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xf, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10}}) 04:01:00 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x8, 0x0, 0x2}}) 04:01:00 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/102400, 0x19000}, {&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000140)=""/160, 0xa0}], 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000006dcdcd28318a1f15", @ANYRES32, @ANYRES32=0xffffffffffffffff], 0x18}, 0x40000100) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000280)={0x401, 0xf9bb, 0x5, 0x7, 0x6, 0x2}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x5276}}) 04:01:00 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x495, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:00 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002300)=0x0) getresuid(&(0x7f0000003900), &(0x7f0000003940)=0x0, &(0x7f0000003980)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000039c0)={0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) sendmsg$netlink(r0, &(0x7f0000007080)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000007040)=[{&(0x7f0000000040)={0x22b0, 0x42, 0x100, 0x70bd25, 0x25dfdbff, "", [@generic="ce3c43e5755a7831cb5313011784c162e4d9ce1d130d087a107e6119e54ae0297ff90e0e092db2dc87df5fb9e8f7956437c9841b3ec0fcc20084d64a517caf62a350a9c1b3fed5de4ae14bbbc912fd6a95e8283df0390ad6d296dbcfb8dddd1a54099292dba260d42331d9ec021bd80e117c0b71", @nested={0xca, 0x52, 0x0, 0x1, [@generic="3e9315a22610936951ce71a4c8892cd6863c08edd08011129b387e564f09bf2ec4f9dee7eb2d670e409527fd0bdc8588790427cc1dc2c2a4496e9fa5aac8e95bfadd61e43392389c83e8ac9264f7ce254c274c71aa50c6f7", @generic="759c1c4556c6fd7dc9b6b006ebb18c60a412c901b6ada8d8a73dc71e34d431a2e5ac45cf483e25a6019d2ea9ba12a2a4d59a5df6f393ded2488dd5cb5c1b8b", @generic="8079d0825c5eefde1f2d33dbc603f9dc34f6b56e4e8c8d3ea41aa43b2f94fb6d766901f168259a", @typed={0x8, 0x77, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="fd123a83625fe30ef0a96743875ca6a592e06d5c4fb9d49d3ceaa13aca78ecbd1d17adbd0d47abcc40f3c75df7667db179369125a56218ef017c035a704176a56fd43b6800f185d2d201bc69a477686dc1f926637887c9eefc3c2428bda265edeec821eb59ada75f6b54eb04406f542f5bfb1dbf6f0980aeee01273fa58e31c57b01af6caead07e6882def5641ea55f9893e65a040325d023ec1bccf96992676b19c2456e90c22bfbb1ba0e0ab03f5df43bc14f99c283713952dd64c6aff8cff2b64da6763b322dd6ff046b7bf954247ca3c4990bdb2b5ba095f6d2feb549d01382f20b4037554", @typed={0x1004, 0x2a, 0x0, 0x0, @binary="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"}, @generic="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", @typed={0x8, 0x38, 0x0, 0x0, @uid=0xee00}, @generic="a77b5c1cc4258d3005583edf2c916674df59a1b63e8f91d8953079db4f16fa7c354528646ed3722e6d36da60cea044e2e49765b50851ac2721f2514a8afa62c0533d61d0755617992490824a77e8bcc90fbdcb5bd9bfe3405172dde6e606d0ba61ad714eb838a90573d0fe5f"]}, 0x22b0}, {&(0x7f0000002340)={0x180, 0x2d, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x4, 0x63}, @nested={0x6b, 0x36, 0x0, 0x1, [@generic="443e2361b8f3cc93890ddece1c1bb29e25502ef86ba5cd12fa458beccab174a39fde290d5f6181e0d2b7a570f414d1cdd29286b20b0f93b21e71214620d4d2e6aff04e2994de5ef33295bd98dde2d9f59b68e3efca45ea4a328ef0f5136296225e959d1950e541", @generic]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x1000}, @nested={0xc, 0x73, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @pid=r1}]}, @typed={0x8, 0x56, 0x0, 0x0, @pid}, @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="9bf6b3e97ccad1ff51cb63fae46cd23247f8d2f3a41e395c09da8e31d80cee3741e8a1eb212e7b1680ef6f849ead76582a07b9de792aab2e8d94695a0d3bd167402797a2d327d47b7c838be48060e95553ab52d1ed02914c81571e450950896c4fe961ef2857f220680c1fe2d5bd41e9963793a8ec6e0d0f002b9d2d9c2634bc6c8766cf4c6105be6c03c796bf529f9fc64183379d2d02bd459b1a149765114546029f7ed29b15eb7abbed1da175242e99c9c39387bf0ffe17861c44988176bd8a1be4c18d4aaa892084"]}, 0x180}, {&(0x7f00000024c0)={0x1430, 0x1b, 0x0, 0x70bd27, 0x25dfdbfe, "", [@generic="d19d1c13ac919153344c92a657b079feca262b7fdcec4cf13794cee264805a7838a54b047e4e437645c9e4f8ff1728b53a376d13da090da8c772388702d1c2bee3e0ddff2de0898c729b4ee282b8785165c69b38d106db747fa19b433968f9e86e293e4d8c4444260d9d728d8882ecca3bc38d86d4b954b39c209a99de9ace9a8493ac73f507d2d0f1d4ff782300c02507f74b9a80fb0a7bc3d894f17facb8603f8fbd0cd8156e562adeadc9317be633612edbfd750157b90d17c1aa0bd0da604db839e7940ab1eccfb278182701b52b3090bd7f9f328dfa4ba4663e6480f32b58ea", @generic="28c99aae97e0ff6cf1a9f5576782ace6682277eaf6dd5ddf27819e23758eb83a2d99e8b524e2f4e4d2358f79f4fbb1b0c6e177950a1441d2ce8a9f8debfa37ea8863781140216b93ab229f3cf1510c1948e9f8cf6c5ca3828d57c721fcfa194a97476808a52a5d014c4ec22355efdd6b8797b75cac4b82ff64be78efb49d3046e411dedced26c2fbfb620fa39a125b17283af8108a67448dd94d50c5203060b81cb126a6413ed4f5e7755dcc5c9f9aab36ef73bc12037a8ea4ef2fa9a5a4c2f3aa03c35a3d033f1f0d4022bb4dcb8f74183c05f8fd058244aefe7117e28fc453c9acaa8bfb1953f68c27f8a65608c254e4f312dcf7096a388f0ed50d054efe68356a20a23712744e64ab9159f4104ce773af2f69fbf8e5bdd9f4718b17b9224bada9a6af8723df1a24c39cb2badba0fe8130396687c0f7df5f8e22ad1a6920df4990a50b1cc92340ea54a7e4256c70f475a348399f8bcbf5b42fa372f889909bb2d4eba2968eeb483ed7d7ba715239e9ed6222176e9a07802e2f1f5f3f689c6efcdbcc04ef52a3337962899f1b33791c92d54873aacf8b4355749ab5ef9e91aa5a9f80c1f482675bb58f888732330a69c5c47999dfc841a5b8a6583eaa5ccd7a34c3620f0af5853306f555f645de76c9cf1e8265f5803da818f6af4bf99a58d3b83f4aa36b8b8e0431793a35a468647ea77c49ca2594f8edc527ab8c52cafeca26b5e4e7db6f2d6bf9b415cd59a0cefa72b02ef93629922007c5eb211700e96155cad90d16c42961a30c569f66152f23a267b7bd70322eb0f5851054eca270aaaf6dffecde9fe7f9958abfb36a9908536d44db49715b2da43415ac91fb507498bd0f52df1a9ef7bc9fa9870bf5a470f8bd29bfe17ff36d13cadcfb4d492a8c6683d61747fa627fdab5bda8135bf11962507370d618302572bd18ef7499521e017f0ae7899416623666f5b18c06fbb7d993536eec1e9805f4b37cb184824c7ea1b12dcd1ec43dca8ef47ac9ae2e87c75412ec1f0e5b8df4e9f27fe5099375245adaadfa6f8cb87c390a2899495e55b2800eb04fd40baf196852823e5b6505218030ce238a09f98adf6222f4082ced7535ba9a71f7eb56fed15b295ebb711b9478fd360a6bfd76489f60298138eca675019e5bc2d7139809d8601523382e2b68f9d04df2b2d7c328bbd7ed2c675daef7549dc249f7f649d877076a97c50269013dbd8ee7135be5aa924fc56ea1a24737e848ed784dd7ff5cd0b010349fc417f01da164d847055f0e92d7668fb529e9280e97bc3d9e07f242de69d86bc27d7bd163f2f57f8da03c710fc664fc15e10a4793a5c74486145f0b16660968a915969769ae7ff6057b0ae043cc8a3722d6bb356c04d3453bb8cbbdf8bd13da0917caf5c42fdff00e60ffc16d4c7b1e013d0c92b6302320a53e17fbd2ada5dd88e7efff0d1f8e724457720bcef8da0a718e6f6ee645a96703534b9f4285bb619e64f968aaf81caa7cec708905c7b01fa499e8e463977f9b00ec3a1e619510757bd3447a2d41e9fe2e63a19d3a519b4ac8a192a9107519181747cfb0eee3837a7f315b791e0a82aa256723b4d12c1c37f066d06374eeeb871e3cee05b1583ae785a28ba98db322fa8f110161ffdd07af9bb4f43b928459214979330f0318e7bb7b589a94d87b96a91c3eefebd768298cd55c85ce3ea7cd3ef0e8cee0a62473f6f76556a305a2f7a75e250c1caac0ee145e4e858f55936e6176f8e91daa20c7d8804c6322b9421b1b409d37a673b6662735fa302d46379fb5093f86717e863cefb8535b0e11c118acb4bba14e61c85e31e4849fc993608e7b90dd5c67be4ba95f8cbd0d111f1412c72b401ed993bc4f698f252b4e7a96182b050ae15a7b84acb9b219bd43bf1192ee28b86873298a2f59d3d085c588de91bd0add7c09efbd8ff6afcdc213d9de99a42111d1ae1310d78ca76ca79133b87b79957b65f410fa8ad8a90cfa4961aaf9578494848d66dbd973d32c178d47e976f90e281ad9c115003fdec71ded0be0760cf80ca2efe7f1444e192a50ee319ac58e9f651666f342ffee8e3f5ec38ccc8ee19ad593602f6c9314983f9d3eebf21b447e5e81ddcdbaf58dd9763ea330b96cb566d5077bf411af7d026a7571b9767fb92332e015104c2128a4b1cc93203bb62c5645b19537e38251d0c39beeb4d9069ec114c6b8b46b3108477b1b0977135793f69abea0344982cb3548f37915f35a4d80f7fd1697a7975880591bef7d5987278c04cb4ea6f7a3adf6bfab7473e331372d3fb43b20cf67b741c2d093e51651d5157ce84b01cac700851f3ca95882459cf86db01434ce7275f0a1d451894f63f86606056abbc0192e7191f15ee1e046f943bfb2e6237650544618a645ce30e8a45dafc5552a5c5fc9e071702d6225f88d53c8bd90d26b6cc38075a36ef9b444ebf5c21ae8930f7af0545fa2d2b27854ac1d88db45b86a5318b623e82bf20dedaa5680bf81bad4699141cdb1d1278adbb52f9ae40b93dccc2bd69cfe4ded501f9cf8121eb87e39d8f7852a800b3bee79a715242558b9abd97ab62666a091ab8165c4ce317078a2808f56cd0a709ce574cd8cdfb869c1fb210318996bacbc300e9aebb89e71ccfdcfcc53b08762271d0f906712754ad4e2e65c0152cdbd358b8fe6f2cf8d16047f014c3ce18b64f47492e2b272e4a796aa2954be92315cbd6b4a71dc164644d18438019b1bef4fe8a17b6802476080ef687acb482ed5b16f74cf6eb2ac32dc7053d02325cbde2e245feef281d9b9b413ba520f97a3844a0bfbc9199e2577d1a1a9f7142f2706d627752eda665bb72ae21de824fd4fa9037dabcfd941a116412091de2644ceb030146807fbd2715a8196bb1448585fbabdb19e96d4c2d289cbfdd82be655268b30e8b3debe010e7911fa7d276736e3ed0dd8cacf147ca98455c44cc071b954655293acf0ffc345acfe2b6d2f5a0695703b2a089bdaa2935bad7a7079236d8e0b24223bea32cdccceafbdee26747e2044a89dde4a65d618a7ad2d5733b71f9d4182973c2a51fbb8874281358748c857ea03774b07887d711218f019765f9db10c474f18b9cb69da2cddec68ddb85bb70b6da86fc9076dce9606789216718af4a34994a1abfdae66e753abd80a11e6f55fc4457535036f6a24ba7fdabbd82fd34cddcd5198c1874f3aab9f131fe7b504798f268a6d94e06bc672ebfc4c59b6eead8be4c3a51298f4873ab870e6243fea137f61fc0c64ab98c784ddf685f4b9c98c1de2a92cea9c7f635b37699bab5bf99484e42c9ed4811cf60c21756e7cc6d8b6a0852c77ec9c57ee3dc018657695a27f57608056468083c767d394ff7127b76698c505becb75869fee8a479c4fbf6bdcf87541d8e245eb844ce895e5ab9eff2b809617856089fb71605906d1eade863dd22d18a1ef1f2c2900e402c5de16d3c887e9eb18936835dad314111c8ff8085dc8775eb2a583084bf9dabb353069e219328ab8003019e2186be95fef18c358b1d9d424879ecc3c7cebd2ac2446f272595338d757e8755311bb65a82f796a60300a4817c374d8cd930b30d714bb03a5536131a1f270dc40ecb5da66c895888ba01cffb43258becad0f88d88940bf01d1937de4fee8e3e644dda3f30061c983e139719abc3cb10135104052e7dcbd361cfbbf91207042f3847d92a09996ccb70dc344b5406b88eb2990ecf9e3ea94445d293c0677c29b7da045e22e7dd57d0e27518365cd9809dfe529cc7b52df2754b9bc4ab5300d9f1befd7fca10fc1b8f8c0c034a662b02090e5135ad19788a3e44d8d17e1e186535cb2a546e135ccb73860ef29085c6ba27c3e355448e358a1e042d800462917f7151b708e7012fb450ae8ab711d51ed649c19045c21d160eb504da4915ff758257547efe215af5ed9edd76d19e3f60d559886c01d4dc07cc2b76a77f2201e22c4e05ab7f740d9070730e12fcd1faa85f3e72476448f1d753892bd434beaab2e0bea61e7cd0979a7b014fe15eac14535df8631eccb4fa0835f0e41be0e8b16d4a1a4abff018251533d04cf1f64666a7e770f5aa32d577624f5a78fbc1f7f1669eac16ed517fb5c27e9458c53390cccc27c17e5fe254a8dc96205cff57c262467500005a8905636188eb0acf80f1492881f6e8cb1ef5388cc3f4462c9130c152c85af84b124d128f0d2dbe9c3851d56498e8fc33fde96d858483da1fd4f74e503b41c6b26d9ce1def5f6fafda2c2dc45d66bf69d9f9ecdacceb37c2e21cf9635a7d2ba22e94c9308f594f3d70861b7ef95af80546201e6380bc067645fbdb6d3c80b335c8113f16c00d4893e1fded4a665349aff863baa3dfa528c419db4d22bc24257dd31c337099bab3b04a95846497e1c3a92f029f5de8dee5ba31a3604fcc8b1091e8474e374739620ee63f8ac254618ae56efc82de118d823ae229739d783285cab85999e0cebdbfb95fa76294925697d0e7ad914c1b39cae8fa4837f5a0b8b0e589e125ac574d434f41803852d5788510560b8832f35eabbc6c892f84e57ba3dc1f5288ea45833d17a78e6367ae17bf3061ab08cbcd453ff525ca0ceff1c73ed5a55e4c6c45567f8f35531d0cfee3a94627923cad3534091bfa9f6c2b53794697567b09be83c5ac07f7887fa993fb524f0cf02c51e473a6cc456267a1c2461d9d5c2765eb2ac92ce59f4e58371fb8cee88a10f497c8a04010943826f5418b7eca3e6876b5e8ea8dd445272d2a87484d39c9f4eda45bf9f86841aa9cec9a0d29a39b34a1ee27d6a642c415996da56501d0bf2617bb09fea3ea01165dbd8744bc42ecafc599d5427ea1f7f1d409916f56fc1f37770f19616af2f53a5280a08cc87fade127490c2027d0d3cb8d6dc526eaada0d981b90b558ef15ddca71d048a147421e85cdb6ff81dbb10c2f3ae0be4d6570976d8bdeffd02f9272694dd527f7684586cf730b502c1833e2286df5c09bd2cfaffec15ce5b2664fb5b87845cfef941e68dc8553bf5e0f12b0f31e44ab1f5f886aa03d5edd828651af3adac2f33700363ee292d24b05d6a5162b8b12042194d7be30fbe23587b1a3514235bfb3c13e5c2582ed3e728501a3cb1fc845c00e548c41b43439120ad7fe13e9a87a7b2fa6bde93356d0dab2778fe6d19864782027fd3a9a832aa2e4cfc4e9f82d5fe58aad9f1ee4cd7c8428295e7fe60c400d0f4a4b69753a53f0e16888d4514903db6dd2a0852a800b9cd11b59889aeea626435e7823d3f1017e1da5984341b59e8e5c8d2e4ef10d8f26d647530d89efb7e9f7f7360b4b66e68e222ffe494506bd081bf8eb09357976bafa6629089cb3723ea506e21f9a9026a7ffbcbdb661837881cff470e20ac3353119a67f533ae6cfce21f4f4d6eb0bba3d7a24d8a5a94176ffe9e155b0f9449592aefdff37e5b5bb3de73d1ae7ca9e67264b573345e42ba786f27beabc85f551492e7a07d4211224fa4724b880ef55417f0444ab998ed4ffda2a84bb3cdc9c7193d28a50860e82e72f9f1f76c0ae519d0a4777cdb660edbcc651f5e973984d2fbd713ec3aa6d6a28ebd4124eae6760588086316ce0ee3b25f8f9b231d2d5d3c8fccd25bafaa6fabe87af0972ef5f703fab2356350257638e79c17c12c242b66e6ce349e7f1da1b0befab677f8fcaa1ac79657658b9e8626403ad25c23264e8ba0e7941af1c89de1cb377dcec627926108d692ab9cf30a6bb3ec69fe5f5932b5329250cf8758c3ed6e72baa0109fd9a788e212f844ac40b2e701663127aa4a20a3b192c3007df", @typed={0xa, 0x6, 0x0, 0x0, @str='{[]{:\x00'}, @nested={0xe5, 0x90, 0x0, 0x1, [@generic="da04b07d2fbf4c67e2138e658c950542159f8f16f59eb8d3801e3ab2ef5b793b79f31a23398a60d0751e30d55e5852819da3e1ed8df94173f2dd5b29b41a6f7b82b76f158f06e02d1dea2a3038d09ca6d2dd8229fd8ba834fb334c85f3e5070ee5d3d3cc38a3a32075ed2e6cf3a5462f4bf222b33d069abcdbafa0bfb7ac456c58533ba833df1f3900959c4b86645d4626d4a2c3f53fc6296f734df98f376cb8d99b76011501658cba8986186216e285c3e1a8c3b354bdd7cdff9d3ec2b9e695a970cfbd4f392a2acc32745af9f3168dc14fd5743c0d3a7cf526684c6e5ee08b30"]}, @nested={0x96, 0x64, 0x0, 0x1, [@generic="3fcceb490c1cf7f981b9884b5f7b817dee50fc349cdf2c5cbb37c9a335acb213f4ab30d16aa61b360308833c78a1bf808fc467bb9ee02ed269009062e9a00fcd28f11a5b1f401c0e5d5c4bbc28f7baa7e9fa14327224e9f9e45945e5390fc1c5b03176e9b1180427640ee2b02826dd25d6222dc38c60a70f26b808c2d08278a2b85d235346268a50150da42ca1f7e33a9269"]}, @nested={0x1ac, 0x68, 0x0, 0x1, [@generic="ca91fe52a04a4725d4a8eaf9eec5b5c7ac060ea3e47aeb2169257fcc640a35b4a6c130fcbcfb23146993", @generic="872231e738ddc50ab74c518f7baf01046f55018dbab6af2a54351a789af4eac395c30626c52e2e246f9e7fa34b2a7fd3479b99aa6f1b34ff552a5009f9a8b1dbd64c3ffc6986ba79b3d836c0219f7ede8aceaaa2fa4972c0dab513886539d2a1d0244134232f7a9676d58c4c671bfde11aacfb99bcf56f9a28e0f237c379539ec1e4758f686183e0da1ccfb489203617fee74fe767356fe64c102c52a5852e631be9c6762e61363618fa17b5ca9b77b56a3b7db4ec17cb7b60e1c649d8a7643c0c", @generic="db97aeb3179ca881eb6bfd7f2295871b7ff6e9aa12e635dd5659a4a3cb7c2c99df210532cd67314f05e0bb969498934ad6039a4c19761f6eef1964d373f0098773fad49fdd711142d6869e4ef1d214539a76e460c692fbf14f325c4771c8a83d35ee96ce6455cbb6c32059480abb97a9e9bb6df44edf12cc9cdb61ec8b20370fab841c9a8b0fb4d6225bbf9461992ee8bf1cda785181d7d4ffe3586474333f7a5f4a839deba7e888e25e2ce92e917416a9603cb5126bfbf499d679dd6c"]}, @typed={0x4, 0x32}]}, 0x1430}, {&(0x7f0000003a40)={0x35ec, 0x26, 0x800, 0x70bd26, 0x25dfdbfe, "", [@nested={0x14e, 0x16, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @uid=r2}, @typed={0x4, 0x5d}, @typed={0x8, 0x2e, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7fc}, @generic="b6779990faf3299cd776b1eae74c15a867aac640fa2a2e871ee6022896312b657d430314d8b749bfa17c828256bd9b933a3c888fe016892a73a1bd0e1efed2689db88da0e7df6f48384b68406c2240c7f840a84118be9f7948cf2a1c46b6928167c6852791c4a211538300e8c8ba", @typed={0x8, 0x95, 0x0, 0x0, @fd}, @generic="3945d785ab53910e471f18a9c07905f54881e630c1a887c3f6573701fedc91518dc7352b22780f94bf28bcb30a80431ed0e9565cab042631329deeea8bff576302a0219642b1df9b653b36e82ec5708487368b42de8c9c690e402cda52e9c0698dbf5a18910b9fdb822503bf93dc89b1e5b69f98b51ec15e7013519fae9e2a065cbf4500eb184eaa96dbaa6c731ef16e5bce4315f0dbba72747fdaedf6e3b8d284ff587a5896d2af728ae4824b2bb846e5732dae26beed26"]}, @nested={0x11b3, 0x91, 0x0, 0x1, [@generic="48d92f535d53a3b6911c3ea152d9ba5dffdd3851b03cb35d2cc73af215481e89cfe24fcf6d780e18cae61cddaae5ee23c0936086df48599062b2f6e8c7ddd82d9ebce3a3d6162d", @generic="a1f5b3cbd38b665eaa22810535e0b015a1cd9e80bcd15d5ee65116cb62980b7a11aaa1ad7ca450e393a38120273ec0be7d1a6df44852edae1490cad8191d736e0c62dcd6a8adacd3343bb41454799ed635b9a2097a98894bf03369bc2ba70d01e33e2efaf165aa291957a5b5580fb129958188eeab5eea2579b9ce2cb5dd7c9bad5c8b21533a176fe39defc3e15ee9338b0484efbf2327814caf10df39d00816a9bcb6474a7e90d77d1a1ed9bc15a93a7697dc3a4332897b4a528ed58add0148443c2e5ff15213880ce65c3fc75d254793d8324dcde3fad654e93c9788c8", @generic="013310724d11eec852f803aa397d472a1ff2839d37e36110e2083605f5249dee7e77a8f36258115ea0b2f414ffe6e2962e969aab43d39ea91363ee2875a8a856490eb63f5c4aa62d106e5c82f51a724096d132721eb5a366938b49da9dffbaee8c8f45c74e72702be1b38c844ed5adb3e3e7", @generic="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", @typed={0x8, 0x95, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0x7f}, @typed={0x8, 0x6c, 0x0, 0x0, @uid=r5}, @typed={0x4, 0x32}]}, @typed={0x1004, 0x8c, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@local}, @nested={0x11f2, 0x3d, 0x0, 0x1, [@typed={0x4, 0x85}, @typed={0xc, 0x35, 0x0, 0x0, @u64=0x6}, @generic="65b2bb564db2b3d5f7d6acb07ad9a3a2bc5398ed07195abade7edaed003be7e1dafc8bf315934a05dbaf6182e8d0a1996d03e63820723f7673695e8ad8e32928d470c0b2d00f916fa4bb9094e29791761a7f6b10be8352c18840607c118e52e7d407b5783043f7ca0812cc751e401711c210305ce807ca01111e8689b8eef8ce7e7b24f7d693e8b1b46df684ec540770ff40412cb55d0ea83e47af8465ae487b9645d6419fda531a46a3969881b5ac06b16d73490c8a1169", @generic="df66c43267759feb87d579a1362e519be653c3b39e98e50561337588b7614aee98023f2b05019476a63091e39cba6092205cbfeffbd2b97d6f2c0b60eccfb16e2553b912dc3a850662f20ae61947631f301e01d06f9f1af0896da6b373fca9e0d5564f5e627d78e86a727d243c012388a4ab69224854b9e65ce7f7c50aa2b54e77ec7fa6cc051f52", @generic="7aa5ca7072403a879871321ef1e8b37a05c1507cb1dca9b8da35c099de88e576efd9e02b6a6732b3f211e81a334200a049a7", @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@mcast2}, @generic="e2ad3c2a7bbe4d85fbd6e8ad9ba028ce01d84fe7a3f5950cc7238cf1d66e37bf3a5e9f8c7b2bfea2ae4bcb4a08169ab214d40b18b8232589a457eb8f52d09dbe7d648cf9b2fbed9c63fcedf2284a59c1eb3b18f29bb27ed0ab699705cf19acdf5aedc6342ceb5bc77ffa44d27dd212af401aa488ab293bf59bc78cb421e32bd6e97beb5cec962f8f292c1039b399724fb5517dfd2c49273380bcfe78b2165c75e7cfc408afde3705f6d8d5dc9cff97671d1df0e88a43ce410c82d549a2f73faa8bc69a1a77676d40fd24ed743f9a674ffc98fc2d2cb54d5b96895987e5a24031ce57bb186ba21995cd0e740d48d54aa52457ce3631519065532f30d3827c526a6e6b005b361e0e99cf60fe86747ca174769e3ed10c1250c4a07a42f86b1ff2ea564238ccf832487ce1cfd905211a6602c74d2a14abbb420f64bf7b273310e09cc4325a95d1a61cf308207be266e5b84f73ea5b11e507035d9ca33d19a78559010032ea9c5749fbfa67f140d9a4aa6cc625fd845fb5e1976179ec6e8edf08e37c0f00a284ee705ca36b3bb214899a8462053a17d2afb049ce280e32726c282229b1ff3f15ff6b742c351432a4a944faf82f4862e5656fcd32d8b0564408a75f8437ce8b153c4355ab7c9289383caddd59f2efe6ca387937dce0171576e1e64eda4ba678d2837b14afd80f71c4f962c67c33f1df60c3d4c562e986f4d1f5409b5448d9a64523b0f85c6b728169c8b4f7f734dfdd4195bdb67fcbed52e63aee8263c4f3501b7bc5ec86853958cbdee20fcbca81ac9ffeac245a65fb031b05c2630e6f7b95ab0377a16e59ff21853a270be13d9590957942a10d32dcc3e8f26bb79bfdb015d6cf338dfe348451d9b9d0535ad9501a8e92ed56c21ef3e21748db6aa725c58a008bb38346ad443776a479bbf8501b185aa814f901fb56cb05e5265902c69233cacd9d4daccb15015abcc5ea0e65c9f2dac77e3c2095cc1902be552354e6f67c8fd0c1374c2d1d82d4171b56a09fdb56373f7738f1720846aa1b6783c6d4dd4bd26068086108f050c8105335032bc9a3a51baaaf946cd68723db55d8ad4cf7fa8f3efadabb3abf6290d18da7b87238c23088f2f205de40bc2460085f83becff955a802fdb4a4b9619181a13e7efbc1207cd1c820830fdec03e6d1e13dd23859a17421841f168da094bf1506787663db2c6fd93ddf49e89d2a3028d927a4d3df0c6b388db706e3063376594df2e393c8222e920f72d79767dbcf8acbaaa9c121c13c0da693792f7f90431aedd31f44fd935bccdc3e805296c6a8684167f2aabb0ea01c5080121763831eb9d76ccec21a318d1d1fbe950082fa9e015c7ea414f664924c279a311d5a5bead2a1c49526a5631706723b0399bac61dcfb9866a0416045a89b1ba42c251dcf44a0ca8801ebb0fb82aa37306f3a62bdf1327de6036adea31190d6e4a99f7b3167d54d08f5afdd60ff0b2db26c90046b383111de87fe4dfe73de9d6e986879f8d13e615172a49932cee0deddccb92f4377cf7b8a257494a4f8e578f99280a2baa1339a46ce03e55dec087a2b785dabff8b8da5af610c83d677f6f0496720f29a58f985c6592b7f86836908a75ec0179e26e7f8a4218957fde7d5a77c67d2425b9f0778852c49b21ac0e435cf339513fec695bd4dad89fbddad5d3c1de726afa79191665314ba402a2ca2d33adee45f2b9da339737d02f8734c5ecf2f6da1e2e97a346fa13a5bddf8377a859797f3edee9917d2410edd6ae1e5f4add0f5701150db97f3e881b99c085aa29c16fbf72b02f69da2901a34b67e98cf57024671951f83db40e3b0f545a6224db06cb0c3a239868b2a33fe713ead2236585ad0ee641c878fd1b1bade368c76acd01077df1294605505362fbd77fa9bd741e7ce1c824097add2a753c91ab04fa77ae4d01aa47d0f79e0e73ec9922458c6c3b5ebdaee7d8c334617e8233c0cc869fbcf8a244552a3b77c449653802789811dac60c052983f6566f465410628c50759b65b2810af79b2e49b0bc661f53201d69da93de1054e2d1d238a6050f9708b52dba6bacab235230cb3910580f3b20813416a421cc4c07cd173afff24e193448c49a6ea5edb9534de0cb3576f9dd2a0b2188f90f71e9c7749c691e81227aea9dcb3fa61da98d5f1161d9431a39dce62a3bd8d342916a06c6a8fb2be4d874f93b9a70b751a75344ac68232163f69699bf0c14256814f64a3d57c9e55a3af1545e792f57c5041171ff571f31b24de289150fc3694ae56342add0622e0b8faa4d207b12230da73731594d611326c2b40268b24844b4b0c535d81d5961b29923086792f46f04526ae9e12cd163621afeb66d79437031d17910409efe92f854f08675fe9659003ca68bbef8b68f9e6ff0e3d01eb37fee2b2e214f8b39ef1244dfdad2d4efa553c6d92f3dd7e2f0e36c8ef61d4b9fc995523acbaea65df108b045cbaaf710182e043acb920f2fd07fc0cb73bc1f31be846fde30eb90b5566722f820770e6aea38ebdb35ac4f6508cc5c084ebc6c4d9a9096c2a3c452ad8d45cd040a19c82a2ec5fc6b9d9e0e891aa3199e61fc32649ed5e94a9a4eb00dd100e76e3ef3388b52f441b6736e4e459093689a3c316dc0207cd2bd80a08772a8f247e80c5a74cf46296a5f4d7bbf83ad85e50cafcd54d22b7505d4fb4f844cb57d88f78f0923ce72684d2977d918047d5c94bc988e0491eaa0ccdb57f4fcdac4cc3985bbb774e7349987d6c963b38ac602a2026494f2d06e7d09b773a62435482a935a68922d106db7cf22cc3fc367d31157c13c1621929e8d2c8a0d80bc5a16c1aff31eb305fdd41ecf8db29fe80b85f3815857a661031541a1fa812ad86340330c21410f11c1b2c98c0b0c8a9c5d2b65ba43159a51a238fa8ddebd17e4f57a186364bd6c76d7ea45c3e9036f0d73058c70ed853e207c4bfb120438b4c8fe7b68cc5dd73686911a8c9f4c988b09f574daee1179608c218ad4ee192b0fc75cc6c30e5338076103edd9fa21dee279ca9ce2df2e0248335801e7836115f666db7875faee483a4e0c33c2c84a715362b5a0bc0422b69b2d5936976e8756df930d5eb84de91b01bd6c56fec23ecabf142e8d02aeb29acb7aee222a0cca84a9c5d18655acff32efb715ee15b44b00b117475c1aeea5b32aea61c52e7cf50ae999252a7c445028cf1a8096f0f8166b3a621fbc31b0566097f6762fb587dfde418e8b03eaf407de464cca0341e82db989d16801a023f0015fb281bfede7ad5a97c48b6f60458525ea7a06f60fc3bd1c84fad5d8e6975982090c306d3c708f87b9bcfe8bc5d24c988c5e489a4035dd9637d4a97e4c243009f66835258a6ac0283930605ca7c31e9877cb666a76b023b57a74d02922db5d0fa444fba474ac9de62190070059e6e947ca62521e0e4320ff147f718e82046cda7aaedce21d1d5299316143c6881a4315ef16804d885dd1f5a5153390b7428a1a78d1ede929ac42ef5221cd20c4eaab0d1f8ac1079c795a36443d63577b624cbc87b1d28ae3eaaf8a84fdccb4d5026dbee6f95cda1257f4ce12ee0671bf38dcee3d50f53163cc501b680526dbe5c77c0dd57f2b1fb79c513381dc448db5fd58acc116ab471cf95bd3edbf2992950a9c823e6020497f00b3dd1dff979cb731719b578d18942299d14dc8ef119788e9b61c8806e04f2cca231f7fc542f20d1e29f2f98f638a3c4ac6f86eab24dc7a6d653f2bb82b0ea185675ab4866bd616ead8a8ea1a0460e8457d3b9a7ffee88c9798c9767c3f41685daffce3a4a58381377c276836be5d30027bd5c812faea4aefeb93611bc9697159a5ed9326e61ea4a983a3921091653b9188e1bd01ec06af1a8a817b8ccfb7d35b8b35691cbeafffe2fcf330679ca88afd9f50ad2fa5e95259aa86fa93f5a5532e6bf2ed4aae88c8f7b8f8ec302ff43899bec461204ccecfa843ee9ba9b7e3f3a2970f2f8682397aa8524788c3a1552c7210fb095362aa3aa5203853d704b0fb580a1ceb350b34714abdc76c90254ec6740b9d76332a03e1076a40a5d814098c49050bafd8ab4357df4a4e030e3695d70c9874adfac92de614ec703fc382b5626a0440d9d6acd5006a7ec4f1ad7818f65edfff1f4fe5cc1b9c10c322f11014349551f2267048d57fe629a1d5a6e97bb1f7e559b9e2206b65dddff875b0c10e831da8b3ba6181370e7af9d20ba64143c44171ef1e03738dd1c3320b7f087b08155f56f3568d3b0ee20c1a2ed6772134547141bcd5602d0896e92ac76592859afbbbecb3d02ebe27fdcf342525d78602b2a5c79d54210136930c1da80f6c8da8421a8f53d9a4b1040149c2bcb07982e1904681e920ecb7472425a571d249cb3dce76b865287cbade0c8751b7fa3661e8ab9ad29f1ab7f9e046def994b0c97a47a6bb422e7b7cb4e93cbde597a1ab1987c5dc546d10d6b4910ad3ed2fcd3e2dee3228301a40e2887f2b3ec1ad96eb0aafbece4de1fff36941df9cfcad2511f6e719aa3bfdfea6ec9d0d9d3768403b8542ae15e32ae14817d1bf25f2b1a8b5f61635e517651efcd42d798fc0c977e93b0d494a16176eef4e0ba473ba159a36a4e2c93b9c366589e99a78ba6c2c258369635d829af1634565b7a67ac590ab05b89992047e25517af3be40030092fe13efc5ad7791b4c6cb08f917d9529530ef30f76c68936ab43a3fb5d026bfafb890c1b949cafc4c55b5bb601e9bcb3e397031563d2b8beaf5df9cb73a1118e5e96ef2562b5dc76584ce560d37a70e4c5befdbb517079dcfd9b930b2d80fc7d5d4e0cdb2e1558fb35ec84b7481709c8131599f1d2a6ceb83f393002f396d1b75e36e834a605313497da39cb3145b6725849babf5f7b8eb39270b37da8c9d64694d5a60bd6b2537a22128aacda467dded406445018bb31182f39c9b7fb1097405bfdf5bcd12de59b56fe82aba425600008d0a9ead775d9aefee0bb44e662338abc3024f9b41a93aab865b45f536897d9f1d3597ae08af84c171bc2ae5adc01c9b4794717a81876e280771d6598c1ffb8643cf1272d3463b5c265802077401bb6e4b7222f548ee57b16e37c8017902223ea833a8e718a0ce52d980c49d6c38baa1b56ab495d77ed8514b22e8339054e87e787f09ee021801978432f643cc7bcc2423d1f29e6ade94f1e0daefd3cef5b7d73252991fcd60a959681fcc5cce443d5cfac43b3f53ac460c70aada3454eeeefdcfaeac51b128b84bb62881993a7613615be6844790da57f5f110eb8ea976222532b7920778ad53b32ee601e77b9a0f7f9859fc1aede0103269a82da6439e393133edbd8de552f8aaa7e86745f903f396eb87aa5d7bc53f9ae3474d93eb62c05dcdb9f969357d97295262f843826de1cdda928835b3ebda7609998dea1ba081c5513daab76f98ec8d24ebaf4fe95ce9736f8edc6bcce96d9a3b6453b67b3e1755a4e064fc30e524cd3b47c230cbe53e57b21196f679b39231a84f487b0821c955a77e04569a45a439cc3ed13836a0f7e6926844a755a3dcd8628d3c0e2d2f110d1354d95f06fe39593c2080bffa8e956078041be2dac9bd0f1f137feae8998276cd2c2a685adf974bec0d5204557dd4d85cb1f4d7af888e4d0a0c35c94038c26f4137ab9b4f2e9a21bf21d3c38e715c0715f06a735cf850a27b6a6a8368181b40c937671677d96413c579d757136f141c9fc7281dd1089c665e34ab8ba160398832878da21656fe66961b11da214fcc1db82e67649e7d2fc851fd30acbb605b22321fa403e8c57ece02950", @generic="fa64194ad0acd85b95e5c755f95e1a5e96d767e0e3c53c957d95b95ffb2c9d9b3d9da67f48ba6a56b80ab18714cf8ba39744b9d49bfafa60", @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x3b, 0x4, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @u32=0x9}, @typed={0xc, 0x16, 0x0, 0x0, @u64=0x10001}, @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0xc, 0x85, 0x0, 0x0, @str='@\xd5:$}-(\x00'}, @generic="b0c9f05a2b9464", @typed={0x8, 0x49, 0x0, 0x0, @u32=0x4}]}, @typed={0x8, 0x3a, 0x0, 0x0, @pid}, @generic="4429eefcdd5f1b4c1956eb6df1e7c6e4cef7781a9cb5053750ec55a35d011f2204ebe53e4ac36badff38c2e2a91e408f7d876203b5cdd1cc0ea2f523ae0107e63f634dca58ef5998048fe286ba818f8e2bc92e3839e2caa119794615db1244c94d31e10c4df66ac075eee158f638b70747ead7bbd4096ccea1e5e94d0582eda85a2975af271ca31b596ca8220a8015b2b3b67742"]}, 0x35ec}], 0x4, 0x0, 0x0, 0xd0}, 0x4000) 04:01:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 1) [ 2803.156523] FAULT_INJECTION: forcing a failure. [ 2803.156523] name failslab, interval 1, probability 0, space 0, times 0 [ 2803.158585] CPU: 0 UID: 0 PID: 22447 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2803.158618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2803.158633] Call Trace: [ 2803.158641] [ 2803.158650] dump_stack_lvl+0xfa/0x120 [ 2803.158692] should_fail_ex+0x4d7/0x5e0 [ 2803.158735] ? getname_flags.part.0+0x48/0x540 [ 2803.158768] should_failslab+0xc2/0x120 [ 2803.158797] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 2803.158833] ? lock_is_held_type+0x9e/0x120 [ 2803.158867] ? find_held_lock+0x2b/0x80 [ 2803.158917] getname_flags.part.0+0x48/0x540 [ 2803.158953] getname_flags+0x95/0xe0 [ 2803.158992] do_sys_openat2+0x9f/0x1b0 [ 2803.159024] ? __pfx_do_sys_openat2+0x10/0x10 [ 2803.159064] ? perf_trace_preemptirq_template+0x259/0x430 [ 2803.159112] __x64_sys_openat+0x142/0x200 [ 2803.159145] ? __pfx___x64_sys_openat+0x10/0x10 [ 2803.159176] ? ksys_write+0x1a3/0x240 [ 2803.159214] do_syscall_64+0xbf/0x360 [ 2803.159251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2803.159277] RIP: 0033:0x7f81f9d2fa04 [ 2803.159296] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2803.159319] RSP: 002b:00007f81f72f1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2803.159343] RAX: ffffffffffffffda RBX: 00007f81f9e8ff60 RCX: 00007f81f9d2fa04 [ 2803.159359] RDX: 0000000000000002 RSI: 00007f81f72f1d60 RDI: 00000000ffffff9c [ 2803.159374] RBP: 00007f81f72f1d60 R08: 0000000000000000 R09: 000000000000000d [ 2803.159389] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2803.159403] R13: 00007ffcdcefe79f R14: 00007f81f72f2300 R15: 0000000000022000 [ 2803.159439] [ 2803.914629] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2803.916102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2804.193026] Bluetooth: hci2: command 0x0406 tx timeout [ 2806.240981] Bluetooth: hci2: command 0x0406 tx timeout 04:01:12 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/157) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) tee(0xffffffffffffffff, r2, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:01:12 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x300, 0x0, 0x2}}) 04:01:12 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x20000) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x2a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x3}, 0x6) 04:01:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 2) 04:01:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1b, 0x10, 0xfd, &(0x7f00000000c0)}) 04:01:12 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4a0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x2, 0x1, 0x6}) 04:01:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:13 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x495, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:13 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4ab, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:13 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:13 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0xba8, 0x0, 0x2}}) [ 2816.233525] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2816.235234] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2816.236791] Bluetooth: hci0: Opcode 0x0c03 failed: -4 04:01:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 3) 04:01:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x3) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:22 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x3, 0x1000}) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8b1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000100)) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000000c0)={0x9, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="0100001b01000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000180)=0x4) 04:01:22 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0xa80b, 0x0, 0x2}}) 04:01:22 executing program 2: fadvise64(0xffffffffffffffff, 0x100, 0x5, 0x2) fchdir(0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1e140, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x225440, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\'{'}}, {@version_L}, {@msize={'msize', 0x3d, 0x540}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_type={'obj_type', 0x3d, ':@{$!\\'}}, {@appraise}]}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf}}) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0)={0x10b, 0x9, &(0x7f0000000480)}) 04:01:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x2, 0x1, 0x6}) 04:01:22 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4b6, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2825.312707] FAULT_INJECTION: forcing a failure. [ 2825.312707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2825.314620] CPU: 0 UID: 0 PID: 22497 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2825.314650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.314663] Call Trace: [ 2825.314671] [ 2825.314680] dump_stack_lvl+0xfa/0x120 [ 2825.314717] should_fail_ex+0x4d7/0x5e0 [ 2825.314758] strncpy_from_user+0x3b/0x2f0 [ 2825.314791] getname_flags.part.0+0x8d/0x540 [ 2825.314831] getname_flags+0x95/0xe0 [ 2825.314866] do_sys_openat2+0x9f/0x1b0 [ 2825.314905] ? __pfx_do_sys_openat2+0x10/0x10 [ 2825.314942] ? perf_trace_preemptirq_template+0x259/0x430 [ 2825.314986] __x64_sys_openat+0x142/0x200 [ 2825.315016] ? __pfx___x64_sys_openat+0x10/0x10 [ 2825.315045] ? ksys_write+0x1a3/0x240 [ 2825.315079] do_syscall_64+0xbf/0x360 [ 2825.315113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2825.315137] RIP: 0033:0x7f81f9d2fa04 [ 2825.315154] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2825.315175] RSP: 002b:00007f81f72f1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2825.315196] RAX: ffffffffffffffda RBX: 00007f81f9e8ff60 RCX: 00007f81f9d2fa04 [ 2825.315211] RDX: 0000000000000002 RSI: 00007f81f72f1d60 RDI: 00000000ffffff9c [ 2825.315224] RBP: 00007f81f72f1d60 R08: 0000000000000000 R09: 000000000000000d [ 2825.315237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2825.315250] R13: 00007ffcdcefe79f R14: 00007f81f72f2300 R15: 0000000000022000 [ 2825.315282] 04:01:22 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) [ 2827.360956] Bluetooth: hci2: command 0x0406 tx timeout [ 2829.409048] Bluetooth: hci2: command 0x0406 tx timeout 04:01:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 4) 04:01:32 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:01:32 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x2, 0x2}}) 04:01:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0x0, 0xaa2, 0x2, 0x10}}) 04:01:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x2, 0x1, 0x6}) 04:01:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000006680)=ANY=[@ANYBLOB="0113040300000056a3ec193ceb9a46609479002307434c8f80dd6980d59b82ab1678d7e86882bc9fedad2cc39888d5232ba3383487ed48dedad77d65e6fddaefe17fe212274ba0824f4807920508e277075b0d0d9d3f973dd0405eb44bd06c4f403394e80b68a7ae7c6d05b27b3675a12cb54e56365ed47ab3872e55a0152c1d20fef2e2f518f13b6092b33186c8b5a37132"], 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000200)=""/198, 0xc6}], 0x2, &(0x7f0000000300)=""/114, 0x72}, 0xfdae}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/66, 0x42}], 0x5, &(0x7f0000002600)=""/149, 0x95}, 0x99}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/63, 0x3f}, {&(0x7f0000002700)=""/91, 0x5b}], 0x2, &(0x7f00000027c0)=""/118, 0x76}, 0xa15e}, {{&(0x7f0000002840)=@x25, 0x80, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/142, 0x8e}, {&(0x7f0000002980)=""/146, 0x92}, {&(0x7f0000002a40)=""/23, 0x17}, {&(0x7f0000002a80)=""/115, 0x73}], 0x4}, 0x401}, {{&(0x7f0000002b40)=@hci, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002bc0)=""/31, 0x1f}, {&(0x7f0000002c00)=""/98, 0x62}, {&(0x7f0000002c80)=""/119, 0x77}, {&(0x7f0000002d00)=""/171, 0xab}, {&(0x7f0000002dc0)=""/82, 0x52}, {&(0x7f0000002e40)=""/34, 0x22}], 0x6, &(0x7f0000002f00)=""/24, 0x18}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/154, 0x9a}, {&(0x7f0000004000)=""/6, 0x6}], 0x3, &(0x7f0000004080)=""/68, 0x44}, 0x4}, {{&(0x7f0000004100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005580)=[{&(0x7f0000004180)=""/217, 0xd9}, {&(0x7f0000004280)=""/205, 0xcd}, {&(0x7f0000004380)=""/11, 0xb}, {&(0x7f00000043c0)=""/121, 0x79}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/43, 0x2b}, {&(0x7f0000005480)=""/254, 0xfe}], 0x7}, 0x2}, {{&(0x7f0000005600)=@can, 0x80, &(0x7f0000005a00)=[{&(0x7f0000005680)=""/173, 0xad}, {&(0x7f0000005740)=""/169, 0xa9}, {&(0x7f0000005800)=""/36, 0x24}, {&(0x7f0000005840)=""/2, 0x2}, {&(0x7f0000005880)=""/134, 0x86}, {&(0x7f0000005940)=""/150, 0x96}], 0x6, &(0x7f0000005a80)}, 0xb1c}, {{&(0x7f0000005ac0)=@phonet, 0x80, &(0x7f0000005d80)=[{&(0x7f0000005b40)=""/61, 0x3d}, {&(0x7f0000005b80)=""/46, 0x2e}, {&(0x7f0000005bc0)=""/142, 0x8e}, {&(0x7f0000005c80)=""/90, 0x5a}, {&(0x7f0000005d00)=""/108, 0x6c}], 0x5, &(0x7f0000005e00)=""/204, 0xcc}, 0x3}, {{&(0x7f0000005f00)=@can, 0x80, &(0x7f0000006300)=[{&(0x7f0000005f80)=""/225, 0xe1}, {&(0x7f0000006080)=""/230, 0xe6}, {&(0x7f0000006180)=""/160, 0xa0}, {&(0x7f0000006240)=""/159, 0x9f}], 0x4, &(0x7f0000006340)=""/177, 0xb1}, 0x5}], 0xa, 0x2100, 0xfffffffffffffffd) 04:01:32 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4c1, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2835.276672] FAULT_INJECTION: forcing a failure. [ 2835.276672] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.277646] CPU: 0 UID: 0 PID: 22526 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2835.277662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2835.277670] Call Trace: [ 2835.277674] [ 2835.277679] dump_stack_lvl+0xfa/0x120 [ 2835.277703] should_fail_ex+0x4d7/0x5e0 [ 2835.277725] ? alloc_empty_file+0x58/0x1e0 [ 2835.277741] should_failslab+0xc2/0x120 [ 2835.277756] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 2835.277774] ? __is_insn_slot_addr+0x140/0x290 [ 2835.277795] ? kernel_text_address+0x5b/0xc0 [ 2835.277812] alloc_empty_file+0x58/0x1e0 [ 2835.277828] path_openat+0xe0/0x2880 [ 2835.277847] ? __pfx_path_openat+0x10/0x10 [ 2835.277869] do_filp_open+0x1e8/0x450 [ 2835.277880] ? __pfx_do_filp_open+0x10/0x10 [ 2835.277898] ? find_held_lock+0x2b/0x80 [ 2835.277916] ? alloc_fd+0x2c1/0x560 [ 2835.277936] ? lock_release+0xc8/0x290 [ 2835.277952] ? _raw_spin_unlock+0x1e/0x40 [ 2835.277965] ? alloc_fd+0x2c1/0x560 [ 2835.277988] do_sys_openat2+0x104/0x1b0 [ 2835.278004] ? __pfx_do_sys_openat2+0x10/0x10 [ 2835.278023] ? perf_trace_preemptirq_template+0x259/0x430 [ 2835.278047] __x64_sys_openat+0x142/0x200 [ 2835.278063] ? __pfx___x64_sys_openat+0x10/0x10 [ 2835.278078] ? ksys_write+0x1a3/0x240 [ 2835.278096] do_syscall_64+0xbf/0x360 [ 2835.278115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2835.278128] RIP: 0033:0x7f81f9d2fa04 [ 2835.278138] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2835.278149] RSP: 002b:00007f81f72f1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2835.278161] RAX: ffffffffffffffda RBX: 00007f81f9e8ff60 RCX: 00007f81f9d2fa04 [ 2835.278169] RDX: 0000000000000002 RSI: 00007f81f72f1d60 RDI: 00000000ffffff9c [ 2835.278176] RBP: 00007f81f72f1d60 R08: 0000000000000000 R09: 000000000000000d [ 2835.278183] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2835.278190] R13: 00007ffcdcefe79f R14: 00007f81f72f2300 R15: 0000000000022000 [ 2835.278208] 04:01:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x5, 0x7fff, 0x400, 0x7, 0x1f}}}, 0xb) 04:01:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x2, 0x1, 0x6}) 04:01:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300, 0x1}}) 04:01:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x1, 0x1, 0x9, 0x0, 0x10}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:01:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300, 0xd55b67ddda585248}}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) 04:01:32 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:32 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x3, 0x2}}) 04:01:33 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4cc, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:33 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 5) 04:01:33 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) [ 2837.281030] Bluetooth: hci2: command 0x0406 tx timeout [ 2839.330025] Bluetooth: hci2: command 0x0406 tx timeout [ 2841.377043] Bluetooth: hci2: command 0x0406 tx timeout [ 2843.424975] Bluetooth: hci2: command 0x0406 tx timeout 04:01:41 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:01:41 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x4, 0x2}}) 04:01:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000500)={0x9, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x1b, 0x193, &(0x7f00000000c0)}) 04:01:41 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 6) 04:01:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000100)="61d4375d9d4821958bc7201bcdf28507fa271b3d75444cfb89cddeb320a2ae3c52c8b1299dbe04f9781aae824bb0dfbd9a26b646e1ddf86c02585a14199ae6bbfcb5cd26cc59cc54bf3597d6cd32db90891f079353b8e2c0") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x7, 0x1, 0x3f, 0x10}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/166, 0xa6}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/17, 0x11}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}, 0x100) r2 = open(&(0x7f0000000540)='./file0\x00', 0x424200, 0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x34}}, './file0\x00'}) 04:01:41 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4d7, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2844.392876] FAULT_INJECTION: forcing a failure. [ 2844.392876] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.394744] CPU: 0 UID: 0 PID: 22570 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2844.394774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.394787] Call Trace: [ 2844.394797] [ 2844.394806] dump_stack_lvl+0xfa/0x120 [ 2844.394844] should_fail_ex+0x4d7/0x5e0 [ 2844.394890] ? security_file_alloc+0x35/0x130 [ 2844.394921] should_failslab+0xc2/0x120 [ 2844.394946] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 2844.394981] ? __create_object+0x59/0x80 [ 2844.395017] security_file_alloc+0x35/0x130 [ 2844.395049] init_file+0x95/0x4c0 [ 2844.395077] alloc_empty_file+0x76/0x1e0 [ 2844.395107] path_openat+0xe0/0x2880 [ 2844.395142] ? __pfx_path_openat+0x10/0x10 [ 2844.395174] do_filp_open+0x1e8/0x450 [ 2844.395195] ? __pfx_do_filp_open+0x10/0x10 [ 2844.395230] ? find_held_lock+0x2b/0x80 [ 2844.395264] ? alloc_fd+0x2c1/0x560 [ 2844.395296] ? lock_release+0xc8/0x290 [ 2844.395325] ? _raw_spin_unlock+0x1e/0x40 [ 2844.395349] ? alloc_fd+0x2c1/0x560 [ 2844.395392] do_sys_openat2+0x104/0x1b0 [ 2844.395421] ? __pfx_do_sys_openat2+0x10/0x10 [ 2844.395457] ? perf_trace_preemptirq_template+0x259/0x430 [ 2844.395500] __x64_sys_openat+0x142/0x200 [ 2844.395529] ? __pfx___x64_sys_openat+0x10/0x10 [ 2844.395558] ? ksys_write+0x1a3/0x240 [ 2844.395591] do_syscall_64+0xbf/0x360 [ 2844.395625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2844.395648] RIP: 0033:0x7f81f9d2fa04 [ 2844.395665] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2844.395686] RSP: 002b:00007f81f72f1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2844.395707] RAX: ffffffffffffffda RBX: 00007f81f9e8ff60 RCX: 00007f81f9d2fa04 [ 2844.395722] RDX: 0000000000000002 RSI: 00007f81f72f1d60 RDI: 00000000ffffff9c [ 2844.395736] RBP: 00007f81f72f1d60 R08: 0000000000000000 R09: 000000000000000d [ 2844.395749] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2844.395762] R13: 00007ffcdcefe79f R14: 00007f81f72f2300 R15: 0000000000022000 [ 2844.395794] 04:01:42 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x8, 0x2}}) 04:01:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x4, 0x0, 0x300, 0x10}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TIOCSBRK(r1, 0x5427) 04:01:42 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4b6, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0x0, 0x1f}}) 04:01:42 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4e2, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 7) 04:01:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x40) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:01:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:42 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x300, 0x2}}) 04:01:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x12) [ 2845.279609] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2845.282311] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2846.496952] Bluetooth: hci2: command 0x0406 tx timeout [ 2848.544929] Bluetooth: hci2: command 0x0406 tx timeout 04:01:51 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 8) 04:01:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x300, 0x0, 0x2}}) 04:01:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) r1 = epoll_create1(0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000000c0)={{}, "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"}) 04:01:51 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4ed, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:51 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0xba8, 0x2}}) 04:01:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$KDDISABIO(r1, 0x4b37) 04:01:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0x4, 0x2}, 0x6) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) finit_module(r2, &(0x7f0000000340)='\x00', 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000002c0)={{}, {0x27}, 0x4, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="7dd45357439d607c985e8b7aac7cb0623d08bc", 0x13, 0x0, &(0x7f0000000140)={0x2, 0x16f, {0x0, 0xc, 0xd7, "8293ac93c77762617fb36af5972fa4f33751389337960610f22b98f43a1e6439d5afb19a7613136ab36cecc1e144c023e8d5bb149418a35173dd5c42144de32b3726ebbae00cceb1b1a04ecd50b9d5c5696b5dcd946c6284857d80b539f51b98eee434f1f95b1cacca75b44ab1e6f938005fd0f38ed0d8568d1642b1ff00627620818a40015448baed60c7638c9b78140690bd634e6fa99c6005d2d2be1558cf6ae8cd82fa728b0de99190a57f1b8bb2c9cb9d12ff95942cc10be12575b25d4cfa13c375e8532fd81a5c69bf8f37bec748c92cee5355e0", 0x8b, "fd18d71aab84dd00e3c4c6f7cb5d4a38c1be4c86341e7289589fa9e3596352a0332da9919263b3810fdca32077393733644df981ec945c385de3c9ebd2d7e694e0c3baf005342181823915b1993411aa55f894273e36aee70eaac72cffe6eae58b48943fb2591be13deeb4846cc5b9f16bbef19cd161db38ffc6442fff68fd595f1c03ba6331686e0d6f40"}}, 0x17b}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000003c0)={@lba=0x29, 0x1, 0x3a, &(0x7f0000000380)=""/58}) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000000"], 0x7) [ 2854.402336] FAULT_INJECTION: forcing a failure. [ 2854.402336] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.404203] CPU: 0 UID: 0 PID: 22608 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2854.404233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2854.404246] Call Trace: [ 2854.404253] [ 2854.404261] dump_stack_lvl+0xfa/0x120 [ 2854.404299] should_fail_ex+0x4d7/0x5e0 [ 2854.404338] should_failslab+0xc2/0x120 [ 2854.404364] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2854.404397] ? perf_trace_lock+0xb5/0x5d0 [ 2854.404423] ? tty_open+0x13d/0x1320 [ 2854.404459] tty_open+0x13d/0x1320 [ 2854.404495] ? __pfx_tty_open+0x10/0x10 [ 2854.404522] ? chrdev_open+0x10d/0x690 [ 2854.404547] ? lock_release+0xc8/0x290 [ 2854.404576] ? __pfx_tty_open+0x10/0x10 [ 2854.404603] chrdev_open+0x234/0x690 [ 2854.404627] ? __pfx_chrdev_open+0x10/0x10 [ 2854.404655] ? lock_release+0xc8/0x290 [ 2854.404688] do_dentry_open+0x71c/0x1420 [ 2854.404713] ? __pfx_chrdev_open+0x10/0x10 [ 2854.404737] ? inode_permission+0x134/0x610 [ 2854.404769] vfs_open+0x82/0x3f0 [ 2854.404796] ? may_open+0x1f3/0x420 [ 2854.404828] path_openat+0x1c3f/0x2880 [ 2854.404862] ? __pfx_path_openat+0x10/0x10 [ 2854.404901] do_filp_open+0x1e8/0x450 [ 2854.404923] ? __pfx_do_filp_open+0x10/0x10 [ 2854.404960] ? alloc_fd+0x2c1/0x560 [ 2854.404992] ? lock_release+0xc8/0x290 [ 2854.405022] ? alloc_fd+0x2c1/0x560 [ 2854.405065] do_sys_openat2+0x104/0x1b0 [ 2854.405094] ? __pfx_do_sys_openat2+0x10/0x10 [ 2854.405130] ? perf_trace_preemptirq_template+0x259/0x430 [ 2854.405173] __x64_sys_openat+0x142/0x200 [ 2854.405202] ? __pfx___x64_sys_openat+0x10/0x10 [ 2854.405231] ? ksys_write+0x1a3/0x240 [ 2854.405265] do_syscall_64+0xbf/0x360 [ 2854.405299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2854.405322] RIP: 0033:0x7f81f9d2fa04 [ 2854.405339] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2854.405361] RSP: 002b:00007f81f72f1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2854.405382] RAX: ffffffffffffffda RBX: 00007f81f9e8ff60 RCX: 00007f81f9d2fa04 [ 2854.405398] RDX: 0000000000000002 RSI: 00007f81f72f1d60 RDI: 00000000ffffff9c [ 2854.405412] RBP: 00007f81f72f1d60 R08: 0000000000000000 R09: 000000000000000d [ 2854.405425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2854.405438] R13: 00007ffcdcefe79f R14: 00007f81f72f2300 R15: 0000000000022000 [ 2854.405471] 04:01:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x300, 0x0, 0x2}}) 04:01:52 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:01:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000440)) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e9eab1e59080ff083a8cb8cac4ff7f0000ebde0f21fd18057b91814cd0eb4aca7c6fdc252e22d24a35b8c426cf8e43f9273df4902100936aa883f48d2101f191206d1c361813d0d223ccc77b7b5542e165b874075cf76330193933831935d568f820fe0c777242eafa9e9290825eedb9c16994d050", 0x75}, {&(0x7f0000000040)="b25653451bac16f4225cf762601e999f03be5c07e73db08a7c56650e84ce1d03e089eb30", 0x24}, {&(0x7f0000000480)="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", 0x146}, {&(0x7f00000001c0)="2d8e8ca7e826dc8e623f5182f879d567163abbacef9b0dc0bd02ad992ea1b17bde9367a8cb20d7774276218ea7076d4ca0ac36c2cfe13497a7fdf9f10ce5f6c9036cf5bd5dbed859e041d3b3b2fbc167ee32dca37b07599b12d8a13f54fd364604a9537fb0ff16c7450fedc9e67f6034b1c3355d170f2ebbe0c5ca555205b41952d3e9c8c3c59f0e4a3a741b5981f804efd6caeb2a377dd1f0dfbb5584a287d705bc6a62", 0xa4}, {&(0x7f0000000280)="64293b3890f8c3b55adf5966b5a064ca0ccee14e0207432397e970ebdca660e1e5e3644151fc13ca1fbec3286d2ce62164afc28c5a1c94", 0x37}, {&(0x7f00000002c0)="3d077be916b5e667acc1cf9a3b7821c5f534bb7c73de2dd4a603433be07f5ee0a2dd2bad574855925eed10324835e8099699463f2a37fc5941e23cef8948998807ac23cb1de47c8d7c5fbd97127115fe7279c53db0e4ea02b8e0a45e0377d3ae3856e023cb5d217b86bc3563dc1e425fa2e2953d95dfefd04f51bce25c", 0x7d}, {&(0x7f0000000340)="960a8b3034d21e53fa3c06d279af8d9949c50095a42173bea8700b6385821f90b8ab730da18c8520ef49997256e53d0482d816909e40bd39c3c0462992b05fb3dee2e55f2656bb2f111caa356f47a6ac38ea", 0x52}], 0x7) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:01:52 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4f8, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:01:52 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0xa80b, 0x2}}) 04:01:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) [ 2855.410562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2855.413548] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2855.415314] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2855.416983] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2855.419107] Bluetooth: hci0: Opcode 0x0c03 failed: -4 04:02:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'wlan1\x00', {}, 0x9}) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xd3, 0x8000, 0x0, 0x7f, 0x1}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:02:04 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x503, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 9) 04:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x300, 0x0, 0x2}}) 04:02:04 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x8, 0x7f, 0x2}) ioctl$KDSKBLED(r1, 0x4b65, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x2, 0x9, 0x3da1, 0x5, 0xf}}) 04:02:04 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x3}}) 04:02:04 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (fail_nth: 10) 04:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100200018000000", @ANYRES32=r0, @ANYBLOB="01800000000000002e2f66696c653000"]) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="80e4e0cb79355f1e135ebc9b10a9e61994ed39aecd32f8cccb8c9c30dd681aacc292a79ff855e64f1dbb405b52b79fd13359945b49bd0addad814386155ea76b6b616619e91d065a3d8aa24cf4c964ef6bcbe8a43681c298ba552241718edfedeff7591e6e409b1b8ac9e6c5ee98dc4170a802e4a59cbc32e5a3fcbbd7ef306e625f6aa443916e6622d17c48cbe27c8b9143478b8f29e9b22604258fdc3098fe24acee3acd245b8c", 0xa8}, {&(0x7f0000000180)="6bd3651594edfa8cf657c6503b4d55dbe76764cc49f1e87294a73592313ee5c5672ffc3c447a07a1d6dab1c97960c8b1261ac36afe6293169d1d6e6a1a0e30dcc8f6ed6c8ea55625f70240dbc01618d419fe5c818839f036f82af0606aaa2ea90db03813f68e45f6df1911abf5e7cec447b332ac3c8f73a0a45b0cad76971e40acffea1e0bd3da370d5734c6d299ff542cd2254dc26b71195b3ec6eed3418f07ed790c562bca74a5ca2fc5775e0a36a6db8f59", 0xb3}, {&(0x7f0000000240)="7bb1a1d7c1aef9e3852b80dfa437eff96d1c9d82833b2e6a364352683778ce28b8c477fe229c37c6bad9537aef3fa14d475a3e7f1578fc2ac2d29030f32a12c835f4c2f4771479a5d2ba5ccfcf7f4ef0303b7699cf33eb3df451397e36ab067b9f6b264dda20028c1bbdd8e19e73e01a63245c8b56cd8a6d4c43c3fc06c9e0bc8399c3a0f12c6b7515e34e9969ce79547a9493d9e20d892a9bb378fd6d686e7d5b47d933eed3075600369ca21a15bab6", 0xb0}, {&(0x7f0000000300)="a56ddc40e9e219085a8bd0d4cdc74f15517a301633d09fc4e92d2d96f7b95449742f7fec649966b4150fe4513e28ffffffe8c74661d8fce70c226bca07e72d2e63fc7f302a0914748d2fb4d60fab401eff8ee38bbdc7d2b6847573518ee9297fd4d08e7a8680b609e9f9", 0x6a}, {&(0x7f0000000380)="a10d15f268d258eaaa91960a0809ac27bc140d3509004ab90a41eeb2215bab03b460445c866fb586cc0ec65a95e396ddb0da2b43b710cfcec7132cebafbd6e464a4ea9b635eabdb523b940d25b771caf7e8411c30a0d05a688d694c8110dd540840868eefabcef5be9940fa678925a24030f28ec8aa352709ba5c07e3167f22542", 0x81}], 0x5) [ 2866.945737] FAULT_INJECTION: forcing a failure. [ 2866.945737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2866.947613] CPU: 1 UID: 0 PID: 22672 Comm: syz-executor.0 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2866.947644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2866.947658] Call Trace: [ 2866.947665] [ 2866.947674] dump_stack_lvl+0xfa/0x120 [ 2866.947716] should_fail_ex+0x4d7/0x5e0 [ 2866.947758] _copy_to_user+0x32/0xd0 [ 2866.947785] simple_read_from_buffer+0xe0/0x180 [ 2866.947822] proc_fail_nth_read+0x18a/0x240 [ 2866.947848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2866.947880] ? security_file_permission+0x22/0x90 [ 2866.947922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2866.947946] vfs_read+0x1eb/0xbe0 [ 2866.947974] ? __pfx_vfs_read+0x10/0x10 [ 2866.947996] ? lock_release+0xc8/0x290 [ 2866.948028] ? __fget_files+0x20d/0x3b0 [ 2866.948075] ksys_read+0x121/0x240 [ 2866.948096] ? __pfx_ksys_read+0x10/0x10 [ 2866.948128] do_syscall_64+0xbf/0x360 [ 2866.948164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2866.948198] RIP: 0033:0x7f81f9d2f69c [ 2866.948216] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2866.948238] RSP: 002b:00007f81f72f2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2866.948260] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f81f9d2f69c [ 2866.948276] RDX: 000000000000000f RSI: 00007f81f72f21e0 RDI: 0000000000000003 [ 2866.948290] RBP: 00007f81f72f21d0 R08: 0000000000000000 R09: 000000000000000d [ 2866.948304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2866.948317] R13: 00007ffcdcefe79f R14: 00007f81f72f2300 R15: 0000000000022000 [ 2866.948351] 04:02:04 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x4f8, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:04 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0x6, 0x0, 0x5}}) 04:02:04 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x50e, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:04 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x4}}) 04:02:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x5a, "d7057a", 0x4, 0x7}) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:02:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2868.118078] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2868.119760] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2868.896966] Bluetooth: hci2: command 0x0406 tx timeout [ 2870.945028] Bluetooth: hci2: command 0x0406 tx timeout [ 2872.993040] Bluetooth: hci2: command 0x0406 tx timeout [ 2875.040931] Bluetooth: hci2: command 0x0406 tx timeout [ 2877.088927] Bluetooth: hci2: command 0x0406 tx timeout 04:02:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x3f, 0x8, 0x0, 0xdc17}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000000)) 04:02:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x519, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:15 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x5}}) 04:02:15 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:02:15 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) (fail_nth: 1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x2e}}}, 0x5) 04:02:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x2, 0xffff, 0x6, 0x8, 0x4}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:02:15 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x6}}) 04:02:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:15 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8101, 0x15c, 0x16}, 0x18) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002e0523032abd7800090000000700000a"], 0x14}}, 0x8004) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x90a00, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xe7bd, 0x5, 0x9, 0x9, 0x2}}) ioctl$KDDELIO(r2, 0x4b35, 0x7fff) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_pts(r3, 0x8000) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x80, 0xffffffffffffffff}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r4, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000200)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0xf}) [ 2879.712955] Bluetooth: hci2: command 0x0406 tx timeout [ 2881.761176] Bluetooth: hci2: command 0x0406 tx timeout [ 2883.808975] Bluetooth: hci2: command 0x0406 tx timeout 04:02:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/134) 04:02:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vcsu(&(0x7f00000020c0), 0x7, 0x801) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000002100)) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x1000, &(0x7f00000000c0)="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", 0x1}, {0x101, 0x1000, &(0x7f00000010c0)="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", 0x0, 0x1}]}) 04:02:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x524, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:24 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040), 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:24 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:02:24 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x7}}) 04:02:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x20, "951dc5", 0xe0, 0xc}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x1, 0x47, "4ebe8b", 0x2, 0x9}) 04:02:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:24 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0xa}}) 04:02:24 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0xb}}) 04:02:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x52f, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:24 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0xc}}) 04:02:24 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:02:24 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xf, {0x2, 0x0, 0x2, 0x0, 0xfffc}}) 04:02:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:24 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0xd}}) [ 2887.914343] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2887.915349] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2887.915957] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2887.918129] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2887.918226] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 2887.933696] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2889.121078] Bluetooth: hci1: command 0x0406 tx timeout [ 2889.122217] Bluetooth: hci2: command 0x0406 tx timeout [ 2891.168997] Bluetooth: hci1: command 0x0406 tx timeout [ 2891.169859] Bluetooth: hci2: command 0x0406 tx timeout 04:02:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4, 0x4, 0x1, 0xcec1, 0x1, "3238fbce9850fe49c26565de8c9360a4bb02db"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:02:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0xe}}) 04:02:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x53a, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:37 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x0) 04:02:37 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc000012b) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x2, 0xffff, 0xfffb, 0x1ff, 0xf}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:02:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000100)={0x0, 0x7, 0x1ed6, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={r1, 0x0, 0x7, 0x1}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x60040, 0x0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:37 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:02:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x2) 04:02:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x49) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:02:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:02:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xacb7, 0x4, 0x0, 0x320}}) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) 04:02:37 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x0) 04:02:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0xf}}) 04:02:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000000)={0x1, 0x3, 0x35}) 04:02:37 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x3, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x545, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:37 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x7a, 0xff, 0x8, 0x0, 0x7, 0x400, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0x8, 0x5}, 0x30, 0x7ff, 0x66bb5297, 0x1, 0x581b56f4, 0x5, 0x8000, 0x0, 0xfffffffc, 0x0, 0x400}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0xfffffffffffffffc, 0x48, &(0x7f0000000140)={[{@user_xattr}], [{@smackfshat={'smackfshat', 0x3d, '!+%\xbc#,'}}, {@euid_lt={'euid<', 0xee00}}]}) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000007c0)='fd/4\x00') stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r9, r7) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r13, r11) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x1, r3}, {0x2, 0x1, r4}, {0x2, 0x4, 0xee00}, {0x2, 0x4}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x6, r5}], {0x4, 0x4}, [{0x8, 0x0, 0xee01}, {0x8, 0x5, r9}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r13}], {0x10, 0x5}, {0x20, 0x4}}, 0x74, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0xf}) 04:02:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x3) 04:02:37 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x0) [ 2900.655400] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2900.774051] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2900.775255] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2900.777791] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2901.729125] Bluetooth: hci2: command 0x0406 tx timeout [ 2903.777139] Bluetooth: hci2: command 0x0406 tx timeout [ 2905.826014] Bluetooth: hci2: command 0x0406 tx timeout [ 2907.873044] Bluetooth: hci2: command 0x0406 tx timeout [ 2909.921111] Bluetooth: hci2: command 0x0406 tx timeout 04:02:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x11}}) 04:02:49 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x2, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x9, 0x7, 0x40, 0x40, 0x10}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) r2 = getpgrp(0xffffffffffffffff) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r3, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x1) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r2}) 04:02:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) r2 = syz_io_uring_complete(0x0) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000000)="8c88756bca9b030fa347db19904be5eb6d164746db36088f0413d542e9ff96ae2c154785") write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200350c708c626b45b68e80cd8e0c7bbed157c56c55fd96c6166d90"], 0x7) 04:02:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:02:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) 04:02:49 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x6, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x550, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:02:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='schedstat\x00') pread64(r2, &(0x7f0000000100)=""/238, 0xee, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000300)={{r0}, {@val, @actul_num={@val=0x2d, 0x0, 0x4b}}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYRES16=r4]) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xfffffffc, 0x8, 0x0, 0x2, 0x4, "b9a7d99d336b3f0e06dde2a9407d82827d4d45"}) r5 = syz_io_uring_complete(0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448c9, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000380), &(0x7f00000003c0)=@v2={0x2000000, [{0x7, 0x9}, {0x5, 0x5}]}, 0x14, 0x2) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0xff, "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"}) 04:02:49 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x12}}) 04:02:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:02:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x77}}, './file0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x3, 0x0, 0x7, 0x300}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) 04:02:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 1) [ 2912.288680] FAULT_INJECTION: forcing a failure. [ 2912.288680] name failslab, interval 1, probability 0, space 0, times 0 [ 2912.290402] CPU: 1 UID: 0 PID: 22867 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2912.290428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2912.290439] Call Trace: [ 2912.290446] [ 2912.290453] dump_stack_lvl+0xfa/0x120 [ 2912.290488] should_fail_ex+0x4d7/0x5e0 [ 2912.290522] should_failslab+0xc2/0x120 [ 2912.290545] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 2912.290575] ? lock_release+0xc8/0x290 [ 2912.290596] ? __alloc_skb+0x2ab/0x370 [ 2912.290621] __alloc_skb+0x2ab/0x370 [ 2912.290639] ? __pfx___alloc_skb+0x10/0x10 [ 2912.290669] alloc_skb_with_frags+0x8f/0x7c0 [ 2912.290694] ? __pfx_perf_trace_lock+0x10/0x10 [ 2912.290721] sock_alloc_send_pskb+0x7e5/0x960 [ 2912.290739] ? lock_acquire+0x15e/0x2f0 [ 2912.290759] ? avc_has_perm_noaudit+0x59/0x3d0 [ 2912.290791] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 2912.290823] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2912.290842] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2912.290880] ? sock_has_perm+0x21d/0x2b0 [ 2912.290910] ? __pfx_sock_has_perm+0x10/0x10 [ 2912.290944] hci_sock_sendmsg+0x190/0x2270 [ 2912.290966] ? perf_trace_lock+0xb5/0x5d0 [ 2912.290991] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2912.291020] sock_write_iter+0x51d/0x5c0 [ 2912.291048] ? __pfx_sock_write_iter+0x10/0x10 [ 2912.291086] ? security_file_permission+0x22/0x90 [ 2912.291120] vfs_write+0xbe9/0x10c0 [ 2912.291140] ? __pfx_sock_write_iter+0x10/0x10 [ 2912.291166] ? __fget_files+0x34/0x3b0 [ 2912.291195] ? __pfx_vfs_write+0x10/0x10 [ 2912.291233] ksys_write+0x1ef/0x240 [ 2912.291252] ? __pfx_ksys_write+0x10/0x10 [ 2912.291279] do_syscall_64+0xbf/0x360 [ 2912.291308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2912.291328] RIP: 0033:0x7fe8fa1deb19 [ 2912.291343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2912.291362] RSP: 002b:00007fe8f7754188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2912.291381] RAX: ffffffffffffffda RBX: 00007fe8fa2f1f60 RCX: 00007fe8fa1deb19 [ 2912.291394] RDX: 0000000000000007 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2912.291406] RBP: 00007fe8f77541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2912.291418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2912.291429] R13: 00007ffcdada941f R14: 00007fe8f7754300 R15: 0000000000022000 [ 2912.291457] [ 2912.888113] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2913.055095] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2913.057107] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2913.059550] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2913.062384] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2913.063797] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2913.066368] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2913.068586] Bluetooth: hci0: Opcode 0x0c03 failed: -4 04:03:02 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2}}) 04:03:02 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x8, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010093e40403000000"], 0x7) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x7fffffff, 0x8000, 0xffff, 0x1000}) 04:03:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:03:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 2) 04:03:02 executing program 3: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffff2f8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:03:02 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x55b, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:02 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="080025bd7000fddbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB="6f68923c82cd51676b56876374704dc73f2eab12d419dc55731c29c7c33413d48e5db6e01c45c8bcdbe3b596731b29991dd1885034ebddadde01807d121b0f5244cc7c2e05e2ca2b3cf344fe58ac92e295b50368e893f4b7d1c4ed386f4feadaa61f72dc38d3541e3181d6a3a12b9e779bfaec373d4233bc7ca3c6920a1dcfcd0d01f6b85c6ac2a02de8fe05f79c626d8681804d681e76d17bc78442a7c35f215c81fa468da1a590dab7"], 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xc028042) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0xf}) 04:03:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x4100, 0x0) poll(&(0x7f0000000180)=[{r0, 0x82}, {r1, 0x4101}, {r0, 0x8000}, {r0, 0x401}, {0xffffffffffffffff, 0x110}, {r0, 0x100}, {r2, 0x7208}, {r0, 0xde0eb2c0618bcfcd}], 0x8, 0x3) 04:03:02 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x566, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:03:02 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001640)={[0xd8]}, 0x8, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c0700000200800000821a0800", @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf25050000000800030008000000"], 0x1c}}, 0x40800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000000c0)="571c3cdf12716dc000bc40ebc65eb70a0bc0a9f76a626d26f5a8339562a6cdeda94670acffc801564f0dedc9b66c965e0651922bea9f3b17a7119daa29856d2c975de41c519d02ebaab0793b1ba8b226a1f7dbed95badd18fcdca4f14d07207cafb3d5b0179d9eec92e875a5ead5edd2949e70ecda7361d7d53e0c646e7dfd3b32b63ae0fa9b8d0c000ec66813352e9396a5e3d1b8f6d10fb73dbc200e4c9f5642424da78de0550b6fa04ce7bc11b7cc0f1bd1a4", 0xb4}, {&(0x7f0000000180)="1b280b5317b69df53b2313d21543efb9a25230a9e7ba0a2827ca48db08292e1afd29316fa63197db3c7c3cd83a0e9dde41350b574c32e4b8f807ef8218f20598888eb07f23f8257201808159cab010857a5fe46556ec18c5c5f751f7a976761ed4b71b48c0f8cd02d578659cf1b1c173e73a8283ed75e34f4503fbbe951058f2d6721b262403352df7e4b974e35dcebef01195e7000e6bf86a75c41eb9888701c97156e2936b8dc028019daae78a30286e2f7c7e4bcceb809f77dff36ff2d69b576759bc5911e93a24482030c8ce8901ffb91c34261805b0b86285ac", 0xdc}, {&(0x7f0000000000)='q', 0x1}, {&(0x7f0000000280)="aa5bdf426f5c1fa38a978f2cd59c0fc47802f8519b1ae82596ee56122058d8c48b86be8ffeb86507cfe41af8456bbc9eb4485029a49da6015e8dc7c2a83b3183947913fd7a6ff6311ce0259cb5488af04e7476223459b1caea6dbc4a84416089259e61925d4c01b13cbd982ea43fc91dae397a0713a0c1ebeebe8c17d15ed4eed5a793a962cacf8bacf1985425a1ad895a68e24d08d14de16b610eb3572ac8578d012e24761d8a618a0f6309101d12a9f6e0c40021f824d5219e7eb6596bdf4ea47c1934205087b1a4302bf6470186b141a8f22298cce8aa95144af7571e176211e0f29ad92ae5e78cf337f42ceb64552373c6a848", 0xf5}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="f5a40c0cc4e3ce39ee126e7b8d49e809e1fc2e44625d4a432dbe1fbe68e0e50edcbcc975ba85b5ffe021a12eb25cb7143b4915813837198b7ce147658af14d0b3f5583d3faf5d34365d7ac6639256250a2b54fecef10a8cd93a1af9924383eb33bdf640078cbae6649fe4d1a739a3d515b37484377bb307d70e5d462e698112d5d1a3829981f574cb32508cd561d9be8e0c0eb54a8c95e068b4547a47f34", 0x9e}, {&(0x7f0000000040)="bbceab0a3f50278f0a9fbb4c821833cc5f534ff30e42d30886068c1c29357a6fe34e", 0x22}, {&(0x7f0000001440)="82e9e86a3a03efa0fe09ad7cba36e801cc7a1f6f59c70257bbdb255ec2bee1210c3fbacf1a386e0d9a460cb52baecf01659b5c30a2d303da270e247227b6ef9f0e28e229334e4fbe39538f680a1214e11b47ce0c6fb40069fecb9e2bf5c45c07a2539196e99aefbe05dbdc1529e61147a01ed5f05f48aeee3d11b16d5f6116fd2468d22f9a0dbf7db7360b38c2b6a7dc31d3", 0x92}, {&(0x7f0000001500)="e85d6c7e907b620e38bc2e4eed8c5e8e13d3a545741c8cad9f8ec478e3e282ea1725257c9e93be5bda6c329ae41fae0bebd193d3dfe88afc5a6e70757906950f6279ca70b8824c1830ee81225bb02d9be511139bac187f0c0dc08ecd", 0x5c}], 0x9) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 04:03:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x7f, 0x5, 0x100}) 04:03:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x6, 0x2}, 0x21) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) close(r1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'lo\x00', {}, 0xfff8}) fcntl$dupfd(r0, 0x406, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0xfe5f) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0xffffffffffffffff, 0xb54, "df5bb4", 0xc4, 0x80}) 04:03:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 3) 04:03:02 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2, 0x2}}) [ 2926.341264] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2926.344497] Bluetooth: hci0: Opcode 0x0c03 failed: -4 04:03:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 04:03:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x571, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:14 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x10, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x1ff, 0x0, 0x7, 0x2}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000001c0)=0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0x8, 0x8, 0x8e5, 0x4}) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x2a3, 0x2a0e00) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000180)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x4) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x1f, 0xcf, 0x2, 0xfff, 0x3}) 04:03:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 4) 04:03:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2, 0x3}}) 04:03:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) recvmmsg(r0, &(0x7f00000086c0)=[{{&(0x7f0000000100), 0x80, &(0x7f0000002540)=[{&(0x7f0000000180)=""/182, 0xb6}], 0x1, &(0x7f0000000240)=""/4096, 0x1000}, 0x40}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)=""/207, 0xcf}, {&(0x7f0000001340)=""/121, 0x79}], 0x2, &(0x7f00000013c0)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001400)=""/19, 0x13}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/9, 0x9}, {&(0x7f0000008b80)=""/78, 0x4e}, {&(0x7f00000025c0)=""/60, 0x3c}, {&(0x7f0000006240)=""/34, 0x22}, {&(0x7f0000002640)=""/138, 0x8a}, {&(0x7f0000002700)=""/133, 0x85}], 0x9}, 0x8}, {{&(0x7f0000002880)=@vsock, 0x80, &(0x7f0000002900), 0x0, &(0x7f0000002940)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003940)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005d40)=[{&(0x7f00000039c0)=""/233, 0xe9}, {&(0x7f0000008c80)=""/211, 0xd3}, {&(0x7f0000003bc0)=""/14, 0xe}, {&(0x7f0000003c00)}, {&(0x7f0000003c40)=""/121, 0x79}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/104, 0x68}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x8, &(0x7f0000005dc0)=""/11, 0xb}, 0x7f}, {{&(0x7f0000005e00)=@generic, 0x80, &(0x7f0000007040)=[{&(0x7f0000008c00)=""/100, 0x64}, {&(0x7f0000005f00)=""/48, 0x30}, {&(0x7f0000005f40)=""/16, 0x10}, {&(0x7f0000005f80)=""/148, 0x94}, {&(0x7f0000008d80)=""/4096, 0x1000}], 0x5, &(0x7f00000070c0)=""/72, 0x48}, 0x1}, {{&(0x7f0000007140)=@can, 0x80, &(0x7f0000008b00)=[{&(0x7f00000071c0)=""/37, 0x25}, {&(0x7f0000003ac0)=""/109, 0x6d}, {&(0x7f0000007280)=""/46, 0x2e}, {&(0x7f00000072c0)=""/89, 0x59}, {&(0x7f0000008900)=""/253, 0xfd}, {&(0x7f0000002900)=""/52, 0x34}, {&(0x7f0000008a00)=""/195, 0xc3}], 0x7, &(0x7f0000007380)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000008380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000008580)=[{&(0x7f0000008400)=""/108, 0x6c}, {&(0x7f0000008480)=""/162, 0xa2}, {&(0x7f0000008540)=""/60, 0x3c}], 0x3, &(0x7f00000085c0)=""/246, 0xf6}, 0x7fffffff}], 0x8, 0x3, &(0x7f00000088c0)={0x0, 0x3938700}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000006140)={0x1, 0x2, "993f69", 0xff, 0x40}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000061c0)='net/ip_mr_cache\x00') bind$bt_hci(r1, &(0x7f0000006200)={0x1f, 0x4, 0x1}, 0x6) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000002580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000006180)="3774ebc1c4b587aa8be428e99a31d1a08563") recvmsg$unix(r2, &(0x7f0000006100)={&(0x7f0000003b40), 0x6e, &(0x7f0000003c00)=[{&(0x7f0000005e80)=""/93, 0x5d}], 0x1, &(0x7f0000006040)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x241) 04:03:14 executing program 2: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8001}, 0x8044) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x11c, r0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_IE={0x74, 0x2a, [@fast_bss_trans={0x37, 0x52, {0x0, 0x0, "595693b79b06070a249801b36e7c66c1", "dcccf9c04a1dc469892246c8af6987b6151baeb6e169bf6134c45665e083c04d", "24376ab4d894267cf3ad0d6a6febcb82de0e25b8490a0c4df62ec11116df6cb4"}}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x5, 0x0, {0x400, 0xff, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x8, 0x1ff, 0x6}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x1, 0x0, 0x0, {0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x400, 0x9, 0x4}}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="1354c4e10f88a4404667075a1ec2fb65a3fbd18e083092760b1f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80002}], @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0x8001, 0x800, 0x1, 0x9, 0x7, 0x2681, 0x3f, 0x8001, 0xf5, 0x0, 0x1f, 0x6, 0xfff9, 0x5c20, 0x7]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2080}, 0x4894) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0xf}) 04:03:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2, 0x4}}) 04:03:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2, 0x8}}) 04:03:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 5) 04:03:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x57c, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:15 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x5f, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:15 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2937.573820] FAULT_INJECTION: forcing a failure. [ 2937.573820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2937.573874] CPU: 0 UID: 0 PID: 22956 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2937.573906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.573921] Call Trace: [ 2937.573929] [ 2937.573938] dump_stack_lvl+0xfa/0x120 [ 2937.573978] should_fail_ex+0x4d7/0x5e0 [ 2937.574021] _copy_from_iter+0x1dc/0x15b0 [ 2937.574047] ? lock_acquire+0x15e/0x2f0 04:03:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x6, 0x1f, 0x2, 0x4, 0x1b, "c1606f81216d8383774c6bc73f3ad0204edf91"}) r2 = fsmount(r1, 0x0, 0x6) r3 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000240)="7183cfd4ee491b6b1bbaabc4591a74046134244ef635a20d88bdd458903d1729b495e09b", 0x24, 0x20}, {&(0x7f0000000280)="cabbbcde09", 0x5, 0x7}], 0x110810, &(0x7f0000000300)={[{'{+'}], [{@uid_lt}, {@measure}, {@subj_role={'subj_role', 0x3d, '3+}{#(#&\xbf'}}, {@fsname}, {@appraise}, {@fsname={'fsname', 0x3d, '/dev/sr0\x00'}}]}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r4, 0x0) io_submit(0x0, 0x5, &(0x7f00000006c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f00000000c0)="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", 0xfb, 0x1, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xc781, r3, &(0x7f0000000380)="b7843f3476b5c5fd196514ebd84a425c73214f3f7c5a2d11e12da116b4003c9f6170ae", 0x23, 0x4b7, 0x0, 0x0, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0xe95e, r0, &(0x7f0000000400)="e4b72df642dbfeca71b31289be0da8233794502065f3cb175cf35aabd799472851b3355a8e4beb97f6d8b13831e7259e3f0e5330bdc21e45c9d0cc", 0x3b, 0x5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x6ed, r0, &(0x7f00000004c0)="71fa74cc3baa9e0eb90aa549b211198a268e620864177d0271b2638b208a087c78555f3599587f248664728bc19fb4fe721855521eec78c80d66ca01512128d4f3a155e754f5abfa94572f31920b79853e", 0x51, 0x9e5, 0x0, 0x3, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000580)="9efa3ca35ec72504e2ccc96dc7e47d4ae2d1e67fc3d023da76cb8b2637bba89df951ddb3ed44447f09119017857f32aaeeea506fffeb348f86095b6762b1acb44aa6a8c59892b1fb05eac4e5971e17d2137cf08916bceeba25ef8ec1e7bb4b0d34df349135adf2f7dcc8cf2b5d65596ed2278d5975ab1d639e33c90a2dcfaa21f221f4454f6e062e98e73bad2c9470009f68f03a58fbaae83919712e555579c2ecd190cf06fc00f6db019aec235c6e62db93cc7400c1dfaa0f3168d45aa4cca58be5f8b37f", 0xc5, 0xd947, 0x0, 0x2, r1}]) [ 2937.574074] ? __virt_addr_valid+0x1c6/0x5d0 [ 2937.574110] ? find_held_lock+0x2b/0x80 04:03:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) (fail_nth: 6) [ 2937.574146] ? __pfx__copy_from_iter+0x10/0x10 [ 2937.574168] ? lock_release+0xc8/0x290 [ 2937.574199] ? __virt_addr_valid+0x100/0x5d0 [ 2937.574236] ? __check_object_size+0x57b/0x880 [ 2937.574278] hci_sock_sendmsg+0x402/0x2270 [ 2937.574312] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2937.574349] sock_write_iter+0x51d/0x5c0 [ 2937.574384] ? __pfx_sock_write_iter+0x10/0x10 [ 2937.574432] ? security_file_permission+0x22/0x90 [ 2937.574474] vfs_write+0xbe9/0x10c0 [ 2937.574498] ? __pfx_sock_write_iter+0x10/0x10 04:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) [ 2937.574529] ? __fget_files+0x34/0x3b0 [ 2937.574566] ? __pfx_vfs_write+0x10/0x10 [ 2937.574613] ksys_write+0x1ef/0x240 [ 2937.574636] ? __pfx_ksys_write+0x10/0x10 [ 2937.574670] do_syscall_64+0xbf/0x360 [ 2937.574707] entry_SYSCALL_64_after_hwframe+0x77/0x7f 04:03:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x587, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2937.574731] RIP: 0033:0x7fe8fa1deb19 [ 2937.574750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.574773] RSP: 002b:00007fe8f7754188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2937.574796] RAX: ffffffffffffffda RBX: 00007fe8fa2f1f60 RCX: 00007fe8fa1deb19 [ 2937.574812] RDX: 0000000000000007 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2937.574827] RBP: 00007fe8f77541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2937.574841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2937.574855] R13: 00007ffcdada941f R14: 00007fe8f7754300 R15: 0000000000022000 [ 2937.574890] [ 2937.819219] FAULT_INJECTION: forcing a failure. [ 2937.819219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2937.819259] CPU: 1 UID: 0 PID: 22970 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) [ 2937.819288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.819301] Call Trace: [ 2937.819308] [ 2937.819316] dump_stack_lvl+0xfa/0x120 [ 2937.819354] should_fail_ex+0x4d7/0x5e0 [ 2937.819395] _copy_to_user+0x32/0xd0 [ 2937.819421] simple_read_from_buffer+0xe0/0x180 [ 2937.819458] proc_fail_nth_read+0x18a/0x240 [ 2937.819483] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2937.819508] ? security_file_permission+0x22/0x90 [ 2937.819543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2937.819566] vfs_read+0x1eb/0xbe0 [ 2937.819594] ? __pfx_vfs_read+0x10/0x10 [ 2937.819617] ? lock_release+0xc8/0x290 [ 2937.819648] ? __fget_files+0x20d/0x3b0 [ 2937.819695] ksys_read+0x121/0x240 [ 2937.819715] ? __pfx_ksys_read+0x10/0x10 [ 2937.819748] do_syscall_64+0xbf/0x360 [ 2937.819792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2937.819816] RIP: 0033:0x7fe8fa19169c [ 2937.819832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2937.819854] RSP: 002b:00007fe8f7754170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2937.819876] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fe8fa19169c [ 2937.819891] RDX: 000000000000000f RSI: 00007fe8f77541e0 RDI: 0000000000000003 [ 2937.819905] RBP: 00007fe8f77541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2937.819919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2937.819932] R13: 00007ffcdada941f R14: 00007fe8f7754300 R15: 0000000000022000 [ 2937.819965] [ 2938.250255] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2938.251739] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2939.425068] Bluetooth: hci2: command 0x0406 tx timeout 04:03:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x5, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:03:28 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x6a, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x6, 0x1e, 0x96, &(0x7f0000000040)}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x9) 04:03:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100, 0x400) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="e4b5491cc4c160a46515ab1f25b87b4a3ba7b86da013a553facb02f02e8fba6b22d2332a12dec871f2b672b40bf6bcbf01df9ad9d879e172c30aa34bb0cbdbea2e7c2271ac6ca29dd6dc0d4a6e4c39bf1bddde21ec39138d2761d0eeb39a8fab07779e2e1585638acde13d35e65bd9a6a8036c141b79ed42bd90d6058b0ab4139c8365b15ff278096f0be39eafcab35988cae6c37413767b2b94546588f5c6f25518f7fa452980daa7e0ee4e05a1b2149205318c3ea124ba82b406d2ddb5a21a9db2788166884f224103b075ff864992271d3389d12beabfebedf2d4a5fa4a00"/233], 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1ff, 0x4401) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000240)={0x59722f88, [0x10000, 0x134], 0x61}, 0x10) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000001c0)={0x30, 0x10, 0xf, 0x6, 0x3, 0x7, 0x0, 0x13b, 0xfffffffffffffffe}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) getsockname(r4, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:03:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\'{'}, {0x20, ',,@]&]:]#*('}, {0x20, '@$'}, {0x20, ')({{.#/['}, {0x20, ')*.'}], 0xa, "afdc838d93545b7aa503fda513a75809fca7c054af742fa13679a4f228d867c47c3d9f35dc52fad71bc9c04aa1d5efed42"}, 0x5b) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\'.(*](-'}, {0x20, '/(:&'}, {0x20, '\\%'}, {0x20, '{\x81@#^+,#'}, {0x20, '-:('}, {0x20, '!^+*-&@'}, {0x20, ')}'}, {0x20, ']\'#'}], 0xa, "9ef2d8a813328211c19c7cb60b508f93458baf77d77aab34ce6b136d6b574718b6c334ddeeaa92cfab30916abe46c1603f0637f359ef2915f1849d5c427212e538000e6d5c1c2d5708fe5c23ba565325e030b6e0c06d1c35d0fa7c70bb08d4c71af85c25abaf77bde31ff347392e39c27828d1ffd6cb084be6704384380da41ba652ca79cfce1b9992a4d9a946d07e72c795dee7334a505ba572a884a821f5b778918e242f8e7834d19e376f096cdce29e8e5b4e1f6207d8d630"}, 0xf1) write$bt_hci(r1, &(0x7f0000000180)={0x1, @link_key_reply={{0x40b, 0x16}, {@any, "d223713ba0110d07db89b02bb709fe4a"}}}, 0x1a) 04:03:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x592, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x9, 0x300}}) 04:03:28 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2, 0x300}}) 04:03:28 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2, 0xba8}}) 04:03:28 executing program 3: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x80, 0x0, 0x101, 0x8001, 0x45, "8f84db138b739a6563c4e463391d0e495153d7", 0x5, 0x5}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x4) 04:03:28 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdf71, 0x0, 0x0, 0x2, 0xa80b}}) 04:03:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x25, @set_conn_encrypt={{0x413, 0x3}}}, 0x7) 04:03:28 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x75, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 04:03:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'tmpfs\x00'}, {0x20, '*]-!/\']),*}&@.'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/^'}], 0xa, "1af762276b8edd2f2c57508435e909dbf358c9b45ba8028993b80b5f32edae85fa716185adc995b9853911f8e3d1d2bb"}, 0x5f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendfile(r1, r3, &(0x7f0000000040)=0x59d, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) [ 2951.634494] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2951.635731] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2951.638317] Bluetooth: hci0: Opcode 0x0c03 failed: -4 VM DIAGNOSIS: 04:08:38 Registers: info registers vcpu 0 RAX=0000000000fc1481 RBX=0000000000000000 RCX=ffffffff84bae1c7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6d84 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643c750 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bacefe RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbaa0f17010 CR3=000000001ab16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000040000000000000000 XMM02=61746f7420636578650a0a0100010101 XMM03=7473657220726f74756365786511006c XMM04=6873616d7320636578650a0073747261 XMM05=78650a0073746e696820636578650a00 XMM06=67206365786508007364656573206365 XMM07=650e007a7a7566206365786509006e65 XMM08=726f74756365786511006c61746f7420 XMM09=20636578650a00737472617473657220 XMM10=746e696820636578650a006873616d73 XMM11=650800736465657320636578650a0073 XMM12=7566206365786509006e656720636578 XMM13=616469646e616320636578650e007a7a XMM14=0065676169727420636578650b006574 XMM15=0000657a696d696e696d20636578650d info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880151b8000 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffff888016b000e8 RBP=ffff888016b000c8 RSP=ffff88803034f910 R8 =00000000ffffffff R9 =ffffed1002a37000 R10=ffff8880151b8007 R11=0000000000000001 R12=ffff888016b000d0 R13=0000000000000246 R14=ffff88803034f9e0 R15=ffff88803034f9c0 RIP=ffffffff84bad840 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc1fd864700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd37879f58 CR3=00000000414d7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004185a34540000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000