at$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) open_tree(r4, &(0x7f0000000200)='./bus\x00', 0x100) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x91) (async) chdir(&(0x7f0000000280)='./file0\x00') (async) creat(&(0x7f00000002c0)='./bus\x00', 0x0) (async) ftruncate(r2, 0x208200) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000001c0)={0x8, 0x4}, 0x2) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x26100) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) (async) fcntl$dupfd(r0, 0x406, r0) (async) open_tree(r4, &(0x7f0000000200)='./bus\x00', 0x100) (async) [ 258.007351][ T4977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.052296][ T3636] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 258.054628][ T4977] usb 4-1: config 0 descriptor?? [ 258.124582][ T4977] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 258.183006][ T28] audit: type=1804 audit(1664579128.395:53): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/133/file0/bus" dev="ramfs" ino=38833 res=1 errno=0 [ 258.266448][ T28] audit: type=1800 audit(1664579128.475:54): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="ramfs" ino=38833 res=0 errno=0 23:05:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:30 executing program 0: syz_emit_vhci(0x0, 0x0) 23:05:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x33fe0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0) r2 = openat$bsg(0xffffff9c, &(0x7f0000000240), 0x300, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYBLOB="3968cfca"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="4120a71c5a0fa2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x33fe0}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0) (async) openat$bsg(0xffffff9c, &(0x7f0000000240), 0x300, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYBLOB="3968cfca"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="4120a71c5a0fa2"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{}]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 23:05:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x80b, 0x2], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x15) 23:05:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000000)={0x18, 0x3b, 0x1, 0x70bd29, 0x0, "", [@typed={0x8, 0x87, 0x0, 0x0, @fd=r2}]}, 0x18}], 0x1}, 0x4000) (async) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000140), 0x400500, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)={0x4c, r6, 0x1, 0x0, 0x0, {0x34}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x3c}}, 0x40000) (async) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000280)) (async) write(r3, &(0x7f0000000180)="d6de0b0731097675c111594bec1c89a1d701dd4d5f147bffc22b980cdcaa67e2fac887d83f0dc9b4113274634a1064b03d8e27d1774eff13fd96365f12a20c64a5f87c6a82a44c138bd8dcac759960307234ccd4e057fdb40306f20d2aa9ec4ee9d8bc1cf9d5e307f07d4d35b464f6b822e95a080c9af80543abaaed14be237dd9b5ace4777547eaec995483804aa4a1fc933977f9119e6067637e789ec16f8316bdf587f0eee8c0828cf39e5858446cbd9bfc7775aa82284653efe57934dde973f4b3da700568efb8e0eb974d00c5082eb5857e1c276efaa2b52465d2db4afe523c33f865a93824422179619128859830f8e1d4970cc7060429084caadcbe", 0xff) 23:05:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x91) chdir(&(0x7f0000000280)='./file0\x00') r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000001c0)={0x8, 0x4}, 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x26100) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) open_tree(r4, &(0x7f0000000200)='./bus\x00', 0x100) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x91) (async) chdir(&(0x7f0000000280)='./file0\x00') (async) creat(&(0x7f00000002c0)='./bus\x00', 0x0) (async) ftruncate(r2, 0x208200) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000001c0)={0x8, 0x4}, 0x2) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x26100) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) (async) fcntl$dupfd(r0, 0x406, r0) (async) open_tree(r4, &(0x7f0000000200)='./bus\x00', 0x100) (async) [ 260.212760][ T4977] usb 4-1: USB disconnect, device number 27 23:05:30 executing program 0: syz_emit_vhci(0x0, 0x0) 23:05:30 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x91) chdir(&(0x7f0000000280)='./file0\x00') r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000001c0)={0x8, 0x4}, 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x26100) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) open_tree(r4, &(0x7f0000000200)='./bus\x00', 0x100) 23:05:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x80b, 0x2], 0x3, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x15) 23:05:30 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x57}, @l2cap_cid_signaling={{0x53}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x80}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x6, 0x5, 0x0, 0x8}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0xffa6, 0x9}}, @l2cap_disconn_rsp={{0x7, 0xac, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x6, 0x7}}, @l2cap_conf_rsp={{0x5, 0x0, 0x25}, {0x4, 0x7, 0x1, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x5, 0x4037, 0x4, 0x7}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_flushto={0x2, 0x2, 0x400}, @l2cap_conf_ews={0x7, 0x2, 0x61af}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x8}]}}]}}, 0x5c) [ 260.262430][ T3636] Bluetooth: hci3: SCO packet for unknown connection handle 0 23:05:30 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x0, 0x2, [{0xc8, 0x1, 0x101}, {0x15a, 0x7, 0x1}]}}}, 0x12) [ 260.430867][ T3636] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 260.475826][ T28] audit: type=1804 audit(1664579130.685:55): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/134/file0/bus" dev="ramfs" ino=38912 res=1 errno=0 23:05:30 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x57}, @l2cap_cid_signaling={{0x53}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x80}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x6, 0x5, 0x0, 0x8}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0xffa6, 0x9}}, @l2cap_disconn_rsp={{0x7, 0xac, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x6, 0x7}}, @l2cap_conf_rsp={{0x5, 0x0, 0x25}, {0x4, 0x7, 0x1, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x5, 0x4037, 0x4, 0x7}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_flushto={0x2, 0x2, 0x400}, @l2cap_conf_ews={0x7, 0x2, 0x61af}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x8}]}}]}}, 0x5c) [ 260.612051][ T3636] Bluetooth: hci5: unexpected event 0x48 length: 15 > 3 [ 260.612084][ T3636] Bluetooth: hci5: wrong event for mode 0 [ 260.701999][ T28] audit: type=1804 audit(1664579130.745:56): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/136/file0/bus" dev="ramfs" ino=38940 res=1 errno=0 [ 260.777433][ T4977] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 260.852780][ T28] audit: type=1800 audit(1664579130.825:57): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="ramfs" ino=38912 res=0 errno=0 [ 261.187942][ T4977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 261.205475][ T4977] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 261.218851][ T4977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.268420][ T4977] usb 4-1: config 0 descriptor?? [ 261.310596][ T4977] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 23:05:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:33 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x91) chdir(&(0x7f0000000280)='./file0\x00') r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000001c0)={0x8, 0x4}, 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x26100) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) open_tree(r4, &(0x7f0000000200)='./bus\x00', 0x100) 23:05:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x0, 0x2, [{0xc8, 0x1, 0x101}, {0x15a, 0x7, 0x1}]}}}, 0x12) 23:05:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x33fe0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0) r2 = openat$bsg(0xffffff9c, &(0x7f0000000240), 0x300, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYBLOB="3968cfca"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="4120a71c5a0fa2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:05:33 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x57}, @l2cap_cid_signaling={{0x53}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x80}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x6, 0x5, 0x0, 0x8}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0xffa6, 0x9}}, @l2cap_disconn_rsp={{0x7, 0xac, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x6, 0x7}}, @l2cap_conf_rsp={{0x5, 0x0, 0x25}, {0x4, 0x7, 0x1, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x5, 0x4037, 0x4, 0x7}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_flushto={0x2, 0x2, 0x400}, @l2cap_conf_ews={0x7, 0x2, 0x61af}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x8}]}}]}}, 0x5c) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x57}, @l2cap_cid_signaling={{0x53}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x80}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x6, 0x5, 0x0, 0x8}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0xffa6, 0x9}}, @l2cap_disconn_rsp={{0x7, 0xac, 0x4}, {0x3, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x81, 0x4}, {0x6, 0x7}}, @l2cap_conf_rsp={{0x5, 0x0, 0x25}, {0x4, 0x7, 0x1, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x5, 0x4037, 0x4, 0x7}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_flushto={0x2, 0x2, 0x400}, @l2cap_conf_ews={0x7, 0x2, 0x61af}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x8}]}}]}}, 0x5c) (async) 23:05:33 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x56, 0x30, 0x52, 0x10, 0x1bad, 0x238f, 0x771e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0xff, 0x5d, 0x81}}]}}]}}, 0x0) [ 263.291248][ T3696] usb 4-1: USB disconnect, device number 28 [ 263.330370][ T3636] Bluetooth: hci5: unexpected event 0x48 length: 15 > 3 23:05:33 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80041ec14f1923f0e59bc37c5f35c340769462ac624df6ab065492f1e47ae313e30358ed38915126c4e66dbf8d5a66cdb1e4e1be5fa6a47f6068f94"], 0x45) [ 263.330402][ T3636] Bluetooth: hci5: wrong event for mode 0 23:05:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x0, 0x1, [{0xc8, 0x1, 0x101}]}}}, 0xc) 23:05:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) [ 263.420215][ T3636] Bluetooth: hci5: unexpected event 0x48 length: 9 > 3 [ 263.420263][ T3636] Bluetooth: hci5: wrong event for mode 0 23:05:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) [ 263.464906][ T28] audit: type=1804 audit(1664579133.675:58): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/139/file0/bus" dev="ramfs" ino=39038 res=1 errno=0 [ 263.494068][ T3636] Bluetooth: hci5: wrong event for mode 0 23:05:33 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80041ec14f1923f0e59bc37c5f35c340769462ac624df6ab065492f1e47ae313e30358ed38915126c4e66dbf8d5a66cdb1e4e1be5fa6a47f6068f94"], 0x45) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80041ec14f1923f0e59bc37c5f35c340769462ac624df6ab065492f1e47ae313e30358ed38915126c4e66dbf8d5a66cdb1e4e1be5fa6a47f6068f94"], 0x45) (async) [ 263.587496][ T4977] usb 2-1: new high-speed USB device number 10 using dummy_hcd 23:05:33 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80041ec14f1923f0e59bc37c5f35c340769462ac624df6ab065492f1e47ae313e30358ed38915126c4e66dbf8d5a66cdb1e4e1be5fa6a47f6068f94"], 0x45) [ 263.807301][ T3696] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 263.827605][ T4977] usb 2-1: Using ep0 maxpacket: 16 [ 263.952094][ T4977] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 263.967939][ T4977] usb 2-1: config 0 has no interface number 0 [ 263.987332][ T4982] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 264.158971][ T4977] usb 2-1: New USB device found, idVendor=1bad, idProduct=238f, bcdDevice=77.1e [ 264.172996][ T4977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.187951][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.203215][ T4977] usb 2-1: Product: syz [ 264.211307][ T4977] usb 2-1: Manufacturer: syz [ 264.211759][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.219930][ T4977] usb 2-1: SerialNumber: syz [ 264.230608][ T3696] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 264.239720][ T3696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.249413][ T3696] usb 4-1: config 0 descriptor?? [ 264.278592][ T4977] usb 2-1: config 0 descriptor?? [ 264.289065][ T3696] usbhid 4-1:0.0: can't add hid device: -22 [ 264.296531][ T3696] usbhid: probe of 4-1:0.0 failed with error -22 [ 264.381544][ T4982] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 264.396064][ T4982] usb 1-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 264.407477][ T4982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.440322][ T4982] usb 1-1: config 0 descriptor?? [ 264.500518][ T4982] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 264.541418][ T4982] usb 2-1: USB disconnect, device number 10 23:05:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) 23:05:36 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c98004001e0005001700000000f6fffffe0f0000212161009f000700ff7f2000020004000800"], 0x27) 23:05:36 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 23:05:36 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x56, 0x30, 0x52, 0x10, 0x1bad, 0x238f, 0x771e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0xff, 0x5d, 0x81}}]}}]}}, 0x0) 23:05:36 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c98004001e0005001700000000f6fffffe0f0000212161009f000700ff7f2000020004000800"], 0x27) [ 266.383185][ T4982] usb 4-1: USB disconnect, device number 29 [ 266.407384][ T3636] Bluetooth: hci1: wrong event for mode 0 23:05:36 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c98004001e0005001700000000f6fffffe0f0000212161009f000700ff7f2000020004000800"], 0x27) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c98004001e0005001700000000f6fffffe0f0000212161009f000700ff7f2000020004000800"], 0x27) (async) 23:05:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) 23:05:36 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x0, @multicast2}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 266.578537][ T3636] Bluetooth: hci1: wrong event for mode 0 23:05:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) (async) 23:05:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="201692000000f2f22fad"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x77a1e18bc1bcf3cc, 0x0, 0xd5, {0xd5, 0x7, "5966a1df46cf6f2e53338dbe4565801ae40f9dffeb712e6d8d0079c5768eb7c06708b413f52befa18e884dcf9107b77ec1e425ddaca07774707cc487892e51c0637795193fa69134e8d32f1cf8f2477970ce6a053d83db088cfe73a514ef2bf3cca5fb3802dff03d80fc36f62d258c89ccc3fc1ac1af4cd8f1d3f06012c05f1dd941ffe7c9b9eefa092301458b5d8d4f44c86897ca7efd999a38cfc4fe3b7b1e7075450a8e452974c0e91b1e538da845c6a30867993cef42cfc9044f5311e027f43d1e698c0ffdac149094a61415cdb70191f2"}}, &(0x7f0000000180)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "e3ba6d3c306e2a0f6a4fb9eac03007d56507e7ed7f336e5cf75ffa67816035267a3adee374fbf00c1e2f99212c042859aa0b446af7d332f39924751c4a5e98b5d065d6c1ffda957b373b03aa0c5e1c45a6f6795271dd17819451ccc3d782a41f54ceca9fcc87d109dc2e80caabce8fdd35c17a9be74782088f04a3f4e4b4ee877fc62668de4575787fd00c"}}, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@global=@item_4={0x3, 0x1, 0x7, "a4bfe7c1"}, @global=@item_012={0x1, 0x1, 0x9, "ac"}, @local=@item_4={0x3, 0x2, 0x1, "e1c9c8a5"}, @local=@item_012={0x2, 0x2, 0xa, "90e9"}, @global=@item_012={0x2, 0x1, 0x9, "0ade"}, @global=@item_012={0x2, 0x1, 0x1, "a756"}, @main=@item_4={0x3, 0x0, 0x9, "1ddecdfa"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "2982613d"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x20, 0x1, {0x22, 0xbd7}}}}, &(0x7f0000000680)={0x18, &(0x7f00000003c0)={0x40, 0xc, 0x92, "b4b47be2a53d9920b2ed48f331405f8ee598c27e3244a5f12ed1e5927fe3e84b7ac7ea47919b46b12bd39ab4634415664a4991523f32702715f90e871f1df1041c992833ac09d4b3a586d27649cb6aabde70d6f7c2463f45f67b44d45f708b0500d319fc56a2786df2ff77076d515cdb6e30e4e9c454e242bb0d856ccd5f5f59871dd0f7ce374ca6a67a1a42b79ecc0cc89c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000500)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00005120925ede9da1b62c03f61aa3daada0f22354e8e0075072d3d2a083bd05208213dbb87fa77207cd643b07a3fe766c26f7d8269f42f6b38ab836cc4be0b7aee1cf92e9ff6c1825cf90b1f43df00521829d870257abc04bd39aecfaebf1b852e90c412dcdaf7ba9b180c49f84a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 23:05:36 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x0, @multicast2}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x0, @multicast2}}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) [ 266.687433][ T3166] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 266.706022][ T4977] usb 1-1: USB disconnect, device number 17 [ 266.726247][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 266.733258][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 266.927287][ T4982] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 266.947327][ T3166] usb 2-1: Using ep0 maxpacket: 16 [ 267.087435][ T3166] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 267.099049][ T3166] usb 2-1: config 0 has no interface number 0 [ 267.221182][ T4977] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 267.277436][ T3166] usb 2-1: New USB device found, idVendor=1bad, idProduct=238f, bcdDevice=77.1e [ 267.286600][ T3166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.294940][ T3166] usb 2-1: Product: syz [ 267.297588][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.299460][ T3166] usb 2-1: Manufacturer: syz [ 267.314975][ T3166] usb 2-1: SerialNumber: syz [ 267.318037][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.329037][ T3166] usb 2-1: config 0 descriptor?? [ 267.335771][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 267.345056][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.362575][ T4982] usb 4-1: config 0 descriptor?? [ 267.409418][ T4982] usbhid 4-1:0.0: can't add hid device: -22 [ 267.419983][ T4982] usbhid: probe of 4-1:0.0 failed with error -22 [ 267.582972][ T4982] usb 2-1: USB disconnect, device number 11 [ 267.597445][ T4977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.612228][ T4977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.622108][ T4977] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.640673][ T4977] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.651391][ T4977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.661439][ T4977] usb 1-1: config 0 descriptor?? [ 267.900014][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.908806][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.417369][ T4977] usbhid 1-1:0.0: can't add hid device: -71 [ 268.423350][ T4977] usbhid: probe of 1-1:0.0 failed with error -71 [ 268.432556][ T4977] usb 1-1: USB disconnect, device number 18 23:05:39 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1}, @l2cap_cid_signaling={{}, [@l2cap_info_req={{}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x7}, {0x4, 0x8, 0x2b5, [@l2cap_conf_ews={0x7, 0x0, 0xa9c8}, @l2cap_conf_rfc={0x4, 0x0, {0x3, 0x80, 0x0, 0x4, 0xffc1, 0x3ff}}, @l2cap_conf_fcs={0x5, 0x0, 0x1}, @l2cap_conf_mtu={0x1, 0x0, 0x5dd}]}}, @l2cap_info_rsp={{0xb, 0x7f}, {0x5, 0xaa4, "260996da996aee909d6b6fa7aed77d2cc0da4d1188c759819f44cde7bc2be7e26cedeec3d2c57c9ca1b81ef86c89503ae8ad563d7b8e70941781e2c014f22b1ae81cc043dc17de52a6542f262de40b283529e09906f6681c35e7d8c22f2d40ea8a0849d929fd9f5420a03c920311d11e4cc4c71c12c6dcc334d152e11d1be7f183dd850aa84333481bf11b5d2e36657598b4c047c225d9beceda55e264cf1d4e140860"}}, @l2cap_create_chan_req={{0xc, 0x80}, {0x3, 0x1, 0x7f}}, @l2cap_conn_rsp={{0x3, 0x1f}, {0x8, 0x7, 0x0, 0x400}}, @l2cap_move_chan_cfm={{}, {0x2}}, @l2cap_create_chan_rsp={{0xd, 0x52}, {0x5, 0x8001, 0xa47d, 0x7}}]}}, 0x3a) 23:05:39 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x0, @multicast2}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x0, @multicast2}}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) 23:05:39 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) 23:05:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:39 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x56, 0x30, 0x52, 0x10, 0x1bad, 0x238f, 0x771e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0xff, 0x5d, 0x81}}]}}]}}, 0x0) 23:05:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (rerun: 64) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="201692000000f2f22fad"], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x77a1e18bc1bcf3cc, 0x0, 0xd5, {0xd5, 0x7, "5966a1df46cf6f2e53338dbe4565801ae40f9dffeb712e6d8d0079c5768eb7c06708b413f52befa18e884dcf9107b77ec1e425ddaca07774707cc487892e51c0637795193fa69134e8d32f1cf8f2477970ce6a053d83db088cfe73a514ef2bf3cca5fb3802dff03d80fc36f62d258c89ccc3fc1ac1af4cd8f1d3f06012c05f1dd941ffe7c9b9eefa092301458b5d8d4f44c86897ca7efd999a38cfc4fe3b7b1e7075450a8e452974c0e91b1e538da845c6a30867993cef42cfc9044f5311e027f43d1e698c0ffdac149094a61415cdb70191f2"}}, &(0x7f0000000180)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "e3ba6d3c306e2a0f6a4fb9eac03007d56507e7ed7f336e5cf75ffa67816035267a3adee374fbf00c1e2f99212c042859aa0b446af7d332f39924751c4a5e98b5d065d6c1ffda957b373b03aa0c5e1c45a6f6795271dd17819451ccc3d782a41f54ceca9fcc87d109dc2e80caabce8fdd35c17a9be74782088f04a3f4e4b4ee877fc62668de4575787fd00c"}}, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@global=@item_4={0x3, 0x1, 0x7, "a4bfe7c1"}, @global=@item_012={0x1, 0x1, 0x9, "ac"}, @local=@item_4={0x3, 0x2, 0x1, "e1c9c8a5"}, @local=@item_012={0x2, 0x2, 0xa, "90e9"}, @global=@item_012={0x2, 0x1, 0x9, "0ade"}, @global=@item_012={0x2, 0x1, 0x1, "a756"}, @main=@item_4={0x3, 0x0, 0x9, "1ddecdfa"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "2982613d"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x20, 0x1, {0x22, 0xbd7}}}}, &(0x7f0000000680)={0x18, &(0x7f00000003c0)={0x40, 0xc, 0x92, "b4b47be2a53d9920b2ed48f331405f8ee598c27e3244a5f12ed1e5927fe3e84b7ac7ea47919b46b12bd39ab4634415664a4991523f32702715f90e871f1df1041c992833ac09d4b3a586d27649cb6aabde70d6f7c2463f45f67b44d45f708b0500d319fc56a2786df2ff77076d515cdb6e30e4e9c454e242bb0d856ccd5f5f59871dd0f7ce374ca6a67a1a42b79ecc0cc89c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000500)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00005120925ede9da1b62c03f61aa3daada0f22354e8e0075072d3d2a083bd05208213dbb87fa77207cd643b07a3fe766c26f7d8269f42f6b38ab836cc4be0b7aee1cf92e9ff6c1825cf90b1f43df00521829d870257abc04bd39aecfaebf1b852e90c412dcdaf7ba9b180c49f84a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 269.550109][ T3166] usb 4-1: USB disconnect, device number 30 23:05:39 executing program 2: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3f, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r0, 0xba}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:05:39 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1}, @l2cap_cid_signaling={{}, [@l2cap_info_req={{}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x7}, {0x4, 0x8, 0x2b5, [@l2cap_conf_ews={0x7, 0x0, 0xa9c8}, @l2cap_conf_rfc={0x4, 0x0, {0x3, 0x80, 0x0, 0x4, 0xffc1, 0x3ff}}, @l2cap_conf_fcs={0x5, 0x0, 0x1}, @l2cap_conf_mtu={0x1, 0x0, 0x5dd}]}}, @l2cap_info_rsp={{0xb, 0x7f}, {0x5, 0xaa4, "260996da996aee909d6b6fa7aed77d2cc0da4d1188c759819f44cde7bc2be7e26cedeec3d2c57c9ca1b81ef86c89503ae8ad563d7b8e70941781e2c014f22b1ae81cc043dc17de52a6542f262de40b283529e09906f6681c35e7d8c22f2d40ea8a0849d929fd9f5420a03c920311d11e4cc4c71c12c6dcc334d152e11d1be7f183dd850aa84333481bf11b5d2e36657598b4c047c225d9beceda55e264cf1d4e140860"}}, @l2cap_create_chan_req={{0xc, 0x80}, {0x3, 0x1, 0x7f}}, @l2cap_conn_rsp={{0x3, 0x1f}, {0x8, 0x7, 0x0, 0x400}}, @l2cap_move_chan_cfm={{}, {0x2}}, @l2cap_create_chan_rsp={{0xd, 0x52}, {0x5, 0x8001, 0xa47d, 0x7}}]}}, 0x3a) [ 269.592570][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.612514][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.689768][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.732949][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.750406][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.766495][ T6005] hub 9-0:1.0: USB hub found [ 269.775999][ T6005] hub 9-0:1.0: 8 ports detected 23:05:40 executing program 2: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3f, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r0, 0xba}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 269.782179][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.802914][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.812457][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.821606][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.831013][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:05:40 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1}, @l2cap_cid_signaling={{}, [@l2cap_info_req={{}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x7}, {0x4, 0x8, 0x2b5, [@l2cap_conf_ews={0x7, 0x0, 0xa9c8}, @l2cap_conf_rfc={0x4, 0x0, {0x3, 0x80, 0x0, 0x4, 0xffc1, 0x3ff}}, @l2cap_conf_fcs={0x5, 0x0, 0x1}, @l2cap_conf_mtu={0x1, 0x0, 0x5dd}]}}, @l2cap_info_rsp={{0xb, 0x7f}, {0x5, 0xaa4, "260996da996aee909d6b6fa7aed77d2cc0da4d1188c759819f44cde7bc2be7e26cedeec3d2c57c9ca1b81ef86c89503ae8ad563d7b8e70941781e2c014f22b1ae81cc043dc17de52a6542f262de40b283529e09906f6681c35e7d8c22f2d40ea8a0849d929fd9f5420a03c920311d11e4cc4c71c12c6dcc334d152e11d1be7f183dd850aa84333481bf11b5d2e36657598b4c047c225d9beceda55e264cf1d4e140860"}}, @l2cap_create_chan_req={{0xc, 0x80}, {0x3, 0x1, 0x7f}}, @l2cap_conn_rsp={{0x3, 0x1f}, {0x8, 0x7, 0x0, 0x400}}, @l2cap_move_chan_cfm={{}, {0x2}}, @l2cap_create_chan_rsp={{0xd, 0x52}, {0x5, 0x8001, 0xa47d, 0x7}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1}, @l2cap_cid_signaling={{}, [@l2cap_info_req={{}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x7}, {0x4, 0x8, 0x2b5, [@l2cap_conf_ews={0x7, 0x0, 0xa9c8}, @l2cap_conf_rfc={0x4, 0x0, {0x3, 0x80, 0x0, 0x4, 0xffc1, 0x3ff}}, @l2cap_conf_fcs={0x5, 0x0, 0x1}, @l2cap_conf_mtu={0x1, 0x0, 0x5dd}]}}, @l2cap_info_rsp={{0xb, 0x7f}, {0x5, 0xaa4, "260996da996aee909d6b6fa7aed77d2cc0da4d1188c759819f44cde7bc2be7e26cedeec3d2c57c9ca1b81ef86c89503ae8ad563d7b8e70941781e2c014f22b1ae81cc043dc17de52a6542f262de40b283529e09906f6681c35e7d8c22f2d40ea8a0849d929fd9f5420a03c920311d11e4cc4c71c12c6dcc334d152e11d1be7f183dd850aa84333481bf11b5d2e36657598b4c047c225d9beceda55e264cf1d4e140860"}}, @l2cap_create_chan_req={{0xc, 0x80}, {0x3, 0x1, 0x7f}}, @l2cap_conn_rsp={{0x3, 0x1f}, {0x8, 0x7, 0x0, 0x400}}, @l2cap_move_chan_cfm={{}, {0x2}}, @l2cap_create_chan_rsp={{0xd, 0x52}, {0x5, 0x8001, 0xa47d, 0x7}}]}}, 0x3a) (async) 23:05:40 executing program 2: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3f, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r0, 0xba}, 0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 269.868881][ T143] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 269.877687][ T3696] usb 1-1: new high-speed USB device number 19 using dummy_hcd 23:05:40 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa9}, "ae68262559a128e5b09a7267dcd324065f6440d09074eb185f9f3c62cc8305c19b737e4b14d9a96162cef84cc35167f22ab653d004fa8dc7c478dc3479068c942b2a0d003de48d952897b82ec956d0476752aaf4f1cf79fd6094e3acefeae2167cf5eba111a0a015b0ceb7a9ad42eb90fae2a51082aec7017f95a3122ec853b62ee45f48facbfa6ad7c25864599a5b220df5548f673dbc22d51baf63d4f70f9c8a7bf7d0d04b3da5e1"}, 0xad) 23:05:40 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 23:05:40 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 23:05:40 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa9}, "ae68262559a128e5b09a7267dcd324065f6440d09074eb185f9f3c62cc8305c19b737e4b14d9a96162cef84cc35167f22ab653d004fa8dc7c478dc3479068c942b2a0d003de48d952897b82ec956d0476752aaf4f1cf79fd6094e3acefeae2167cf5eba111a0a015b0ceb7a9ad42eb90fae2a51082aec7017f95a3122ec853b62ee45f48facbfa6ad7c25864599a5b220df5548f673dbc22d51baf63d4f70f9c8a7bf7d0d04b3da5e1"}, 0xad) [ 270.057546][ T3166] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 270.147711][ T143] usb 2-1: Using ep0 maxpacket: 16 [ 270.152940][ T3696] usb 1-1: Using ep0 maxpacket: 8 [ 270.297475][ T3696] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d [ 270.306821][ T143] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 270.315104][ T143] usb 2-1: config 0 has no interface number 0 [ 270.321514][ T3696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.334410][ T3696] usb 1-1: config 0 descriptor?? [ 270.457459][ T3166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.468544][ T3166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.478667][ T3166] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 270.487914][ T3166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.498214][ T3166] usb 4-1: config 0 descriptor?? [ 270.527574][ T143] usb 2-1: New USB device found, idVendor=1bad, idProduct=238f, bcdDevice=77.1e [ 270.536657][ T143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.549159][ T143] usb 2-1: Product: syz [ 270.553335][ T143] usb 2-1: Manufacturer: syz [ 270.560746][ T3166] usbhid 4-1:0.0: can't add hid device: -22 [ 270.566717][ T3166] usbhid: probe of 4-1:0.0 failed with error -22 [ 270.573187][ T143] usb 2-1: SerialNumber: syz [ 270.581819][ T143] usb 2-1: config 0 descriptor?? [ 270.627494][ T3696] CoreChips 1-1:0.0 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 270.651564][ T3696] CoreChips: probe of 1-1:0.0 failed with error -71 [ 270.670148][ T3696] usb 1-1: USB disconnect, device number 19 [ 270.838594][ T143] usb 2-1: USB disconnect, device number 12 23:05:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:42 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 23:05:42 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 23:05:42 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa9}, "ae68262559a128e5b09a7267dcd324065f6440d09074eb185f9f3c62cc8305c19b737e4b14d9a96162cef84cc35167f22ab653d004fa8dc7c478dc3479068c942b2a0d003de48d952897b82ec956d0476752aaf4f1cf79fd6094e3acefeae2167cf5eba111a0a015b0ceb7a9ad42eb90fae2a51082aec7017f95a3122ec853b62ee45f48facbfa6ad7c25864599a5b220df5548f673dbc22d51baf63d4f70f9c8a7bf7d0d04b3da5e1"}, 0xad) 23:05:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="201692000000f2f22fad"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x77a1e18bc1bcf3cc, 0x0, 0xd5, {0xd5, 0x7, "5966a1df46cf6f2e53338dbe4565801ae40f9dffeb712e6d8d0079c5768eb7c06708b413f52befa18e884dcf9107b77ec1e425ddaca07774707cc487892e51c0637795193fa69134e8d32f1cf8f2477970ce6a053d83db088cfe73a514ef2bf3cca5fb3802dff03d80fc36f62d258c89ccc3fc1ac1af4cd8f1d3f06012c05f1dd941ffe7c9b9eefa092301458b5d8d4f44c86897ca7efd999a38cfc4fe3b7b1e7075450a8e452974c0e91b1e538da845c6a30867993cef42cfc9044f5311e027f43d1e698c0ffdac149094a61415cdb70191f2"}}, &(0x7f0000000180)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "e3ba6d3c306e2a0f6a4fb9eac03007d56507e7ed7f336e5cf75ffa67816035267a3adee374fbf00c1e2f99212c042859aa0b446af7d332f39924751c4a5e98b5d065d6c1ffda957b373b03aa0c5e1c45a6f6795271dd17819451ccc3d782a41f54ceca9fcc87d109dc2e80caabce8fdd35c17a9be74782088f04a3f4e4b4ee877fc62668de4575787fd00c"}}, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@global=@item_4={0x3, 0x1, 0x7, "a4bfe7c1"}, @global=@item_012={0x1, 0x1, 0x9, "ac"}, @local=@item_4={0x3, 0x2, 0x1, "e1c9c8a5"}, @local=@item_012={0x2, 0x2, 0xa, "90e9"}, @global=@item_012={0x2, 0x1, 0x9, "0ade"}, @global=@item_012={0x2, 0x1, 0x1, "a756"}, @main=@item_4={0x3, 0x0, 0x9, "1ddecdfa"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "2982613d"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x20, 0x1, {0x22, 0xbd7}}}}, &(0x7f0000000680)={0x18, &(0x7f00000003c0)={0x40, 0xc, 0x92, "b4b47be2a53d9920b2ed48f331405f8ee598c27e3244a5f12ed1e5927fe3e84b7ac7ea47919b46b12bd39ab4634415664a4991523f32702715f90e871f1df1041c992833ac09d4b3a586d27649cb6aabde70d6f7c2463f45f67b44d45f708b0500d319fc56a2786df2ff77076d515cdb6e30e4e9c454e242bb0d856ccd5f5f59871dd0f7ce374ca6a67a1a42b79ecc0cc89c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000500)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00005120925ede9da1b62c03f61aa3daada0f22354e8e0075072d3d2a083bd05208213dbb87fa77207cd643b07a3fe766c26f7d8269f42f6b38ab836cc4be0b7aee1cf92e9ff6c1825cf90b1f43df00521829d870257abc04bd39aecfaebf1b852e90c412dcdaf7ba9b180c49f84a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001000)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="201692000000f2f22fad"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x77a1e18bc1bcf3cc, 0x0, 0xd5, {0xd5, 0x7, "5966a1df46cf6f2e53338dbe4565801ae40f9dffeb712e6d8d0079c5768eb7c06708b413f52befa18e884dcf9107b77ec1e425ddaca07774707cc487892e51c0637795193fa69134e8d32f1cf8f2477970ce6a053d83db088cfe73a514ef2bf3cca5fb3802dff03d80fc36f62d258c89ccc3fc1ac1af4cd8f1d3f06012c05f1dd941ffe7c9b9eefa092301458b5d8d4f44c86897ca7efd999a38cfc4fe3b7b1e7075450a8e452974c0e91b1e538da845c6a30867993cef42cfc9044f5311e027f43d1e698c0ffdac149094a61415cdb70191f2"}}, &(0x7f0000000180)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "e3ba6d3c306e2a0f6a4fb9eac03007d56507e7ed7f336e5cf75ffa67816035267a3adee374fbf00c1e2f99212c042859aa0b446af7d332f39924751c4a5e98b5d065d6c1ffda957b373b03aa0c5e1c45a6f6795271dd17819451ccc3d782a41f54ceca9fcc87d109dc2e80caabce8fdd35c17a9be74782088f04a3f4e4b4ee877fc62668de4575787fd00c"}}, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@global=@item_4={0x3, 0x1, 0x7, "a4bfe7c1"}, @global=@item_012={0x1, 0x1, 0x9, "ac"}, @local=@item_4={0x3, 0x2, 0x1, "e1c9c8a5"}, @local=@item_012={0x2, 0x2, 0xa, "90e9"}, @global=@item_012={0x2, 0x1, 0x9, "0ade"}, @global=@item_012={0x2, 0x1, 0x1, "a756"}, @main=@item_4={0x3, 0x0, 0x9, "1ddecdfa"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "2982613d"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x20, 0x1, {0x22, 0xbd7}}}}, &(0x7f0000000680)={0x18, &(0x7f00000003c0)={0x40, 0xc, 0x92, "b4b47be2a53d9920b2ed48f331405f8ee598c27e3244a5f12ed1e5927fe3e84b7ac7ea47919b46b12bd39ab4634415664a4991523f32702715f90e871f1df1041c992833ac09d4b3a586d27649cb6aabde70d6f7c2463f45f67b44d45f708b0500d319fc56a2786df2ff77076d515cdb6e30e4e9c454e242bb0d856ccd5f5f59871dd0f7ce374ca6a67a1a42b79ecc0cc89c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000500)={0x20, 0x1, 0xfd, "d4d494a25da65051d465a2c3867015b56b1cc4d26087049fdc3902fa0f74e312caaa6172bcab692d97813386458f0bf97e892e9ddb03f141ab31fc5990073937253e5767916db1917988a03b7e9f6d672571406008444a5b1a470571b54d69b20987be9cc60d0f4145a6a60d08fabe0927ceb25a0acd0b9c81d9852632ee005bbb228675bb332138a45f0bdd89993176568f475a42bf79afc930fc17f73dd29907677f53e182363ff5492d5c53d583e863b4df39bb8c7452a9b728620ad8d85857f86dba7fd55eb8cf4f7da9349af545017efc227837696edaa044f500e44d2e485c09b3a792ce844763da97958bc8dc56eb7cf29c1fcc8b20ce1f605d"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x4}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00005120925ede9da1b62c03f61aa3daada0f22354e8e0075072d3d2a083bd05208213dbb87fa77207cd643b07a3fe766c26f7d8269f42f6b38ab836cc4be0b7aee1cf92e9ff6c1825cf90b1f43df00521829d870257abc04bd39aecfaebf1b852e90c412dcdaf7ba9b180c49f84a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) 23:05:42 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x0, "a59f7995f969f9"}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 23:05:42 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) [ 272.610596][ T3696] usb 4-1: USB disconnect, device number 31 23:05:42 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000c0005001700080000000000000000003c97bff1ce1354fb9d5b12311d228e8f19b043c3e7a00fe1eb747c9456822b343b8ddacde708fb2c5f3ecb18855c9416d6ef0be64909e446a7cfb58718bbaa89b7c1ddced93260e2d61d273c16ad103f1d74b982f1e124efb8565e129845b8fcaab029c7bd93ecac5a51077e6df650b0924037d6392f5f6342d3722b37ab1f561aa46376f0c755067120157fb51817dcc306b47c9c17f5c8725413d16b397129ac079d43587da35634844a622dc5d0de39fe659a05"], 0x15) 23:05:42 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x400300, 0x3) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:05:43 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000c0005001700080000000000000000003c97bff1ce1354fb9d5b12311d228e8f19b043c3e7a00fe1eb747c9456822b343b8ddacde708fb2c5f3ecb18855c9416d6ef0be64909e446a7cfb58718bbaa89b7c1ddced93260e2d61d273c16ad103f1d74b982f1e124efb8565e129845b8fcaab029c7bd93ecac5a51077e6df650b0924037d6392f5f6342d3722b37ab1f561aa46376f0c755067120157fb51817dcc306b47c9c17f5c8725413d16b397129ac079d43587da35634844a622dc5d0de39fe659a05"], 0x15) [ 272.836042][ T6050] hub 9-0:1.0: USB hub found [ 272.842652][ T6050] hub 9-0:1.0: 8 ports detected 23:05:43 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000c0005001700080000000000000000003c97bff1ce1354fb9d5b12311d228e8f19b043c3e7a00fe1eb747c9456822b343b8ddacde708fb2c5f3ecb18855c9416d6ef0be64909e446a7cfb58718bbaa89b7c1ddced93260e2d61d273c16ad103f1d74b982f1e124efb8565e129845b8fcaab029c7bd93ecac5a51077e6df650b0924037d6392f5f6342d3722b37ab1f561aa46376f0c755067120157fb51817dcc306b47c9c17f5c8725413d16b397129ac079d43587da35634844a622dc5d0de39fe659a05"], 0x15) 23:05:43 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c0005001700000000000000"], 0x15) [ 272.907382][ T4977] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 272.927042][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 273.047426][ T3696] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 273.277714][ T4977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.323284][ T4977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.422254][ T4977] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.467543][ T4977] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.467557][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.476610][ T4977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.478978][ T4977] usb 1-1: config 0 descriptor?? [ 273.563240][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.606532][ T3696] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 273.650589][ T3696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.722779][ T3696] usb 4-1: config 0 descriptor?? [ 273.821474][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.834308][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.280654][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.290340][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.307494][ T3696] usbhid 4-1:0.0: can't add hid device: -71 [ 274.313520][ T3696] usbhid: probe of 4-1:0.0 failed with error -71 [ 274.329602][ T3696] usb 4-1: USB disconnect, device number 32 [ 274.357473][ T4977] usbhid 1-1:0.0: can't add hid device: -71 [ 274.363435][ T4977] usbhid: probe of 1-1:0.0 failed with error -71 [ 274.372170][ T4977] usb 1-1: USB disconnect, device number 20 23:05:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:44 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c0005001700000000000000"], 0x15) 23:05:44 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x24202, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_elf32(r0, &(0x7f0000001240)=ANY=[@ANYRES16=r2, @ANYRES8, @ANYRES8=r0], 0x7ffff000) r3 = openat$null(0xffffff9c, &(0x7f0000000040), 0x301901, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000240)={{r4}, 0x0, 0x0, @inherit={0x78, &(0x7f00000001c0)={0x1, 0x6, 0x0, 0x5, {0x4, 0x8cc8, 0x101, 0xafe, 0x7}, [0x0, 0x4, 0xf3, 0x6e, 0x8000, 0x2]}}, @subvolid=0xff}) r5 = syz_clone(0x24002080, &(0x7f0000000080)="1adbf80f77a489c4fc11bfa1ec23c227a84032d5e6d85dec60b18d59d32077956ca072b59625566947abfe391829abb61da24f855fead5b5b2ac5f30675dfc60f2bc791f7bd47b9d967fc99579c4d60468f14a461f47d3c69280439655313f1f5de144d176214d265d0de418", 0x6c, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="dcb6389127e5366b049de00e7b638cccf9ed26e6ce9629420bc936d1e8a1caaf4917520a4f4a46e1b93678a3d0") fcntl$setown(r3, 0x8, r5) fsync(r0) 23:05:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbff3f26, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'veth0_macvtap\x00', {0x1}, 0x200}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="89080000000100000740000000030e9c00002000000000005c53ff0f0000000000000100010000010000ffffff7f0000000006000200000000002900000000000000ffffff7f00000000010100000000"], 0x50) 23:05:44 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x400300, 0x3) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x0, 0x1, 0x9}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:05:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="fe9847af2e3ce4a5880f4f8b94380b", 0xf}], 0x1, &(0x7f0000000240)=[{0x1c, 0x10f, 0x40, "0ea69045a864f2da31df02c63aec4abb"}], 0x1c}, 0x44000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 23:05:45 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c0005001700000000000000"], 0x15) 23:05:45 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x400300, 0x3) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) openat(r1, &(0x7f0000000080)='./file0\x00', 0x400300, 0x3) (async) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x0, 0x1, 0x9}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) [ 274.798185][ T6090] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 23:05:45 executing program 2: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9802200600009002e070800980004000002010404000000000e672615080126e80000000000bf33856c633e6179e3d12ed4235fd44cac8a75fa92a708629cb2aa8d7abf9772a11d6ab87eab540cd9725a4772c6b24af17b5b23f307000000203e09c62f736459b13c6a31116b4ec2c98db159387d252442293c87d302507121bd39f6c4da990e5ca210ab3551c85d94e98b32bd39bcf7989da2fdd2e90eff244e5c2d45e8"], 0x27) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x13c, 0xa7}, "cf34557eaec1844a382460a397e1ab1965125681836ecbfc2e6ed6d25c352ce1725086084c9b02d638e619ed39338fed6c0621c6952c7b320f9389c424e1ff675cf63ca5dabc5fc2bf6d4ef9380f9e9b165ae6969838e32f247d8b869e0decbb1aa0d3ea15749d9e6abe560c9cf077104913184958930276664c96f987efd9a0be566db3e1ea0bbaa721839a7e018b82958ce8a443bc67b4c15aaed2ee75f854fe1887853d8bdb"}, 0xab) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="f4040402c90040"], 0x7) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "86c49a17780c992a6f5437b5cab7c2a9d442bebf1756435d2adf27c1d44d3d7ae4aa1e9e095d2607fc6d90bdde1ffd0f1dde925e0c93b257c0820e4365d37807e50a2d789050f5597a1e5f5a43bb50bd5b4b1a5dc67553202496ec018074cbbb64d018834b006c3384a18da4d0542f7bcdc67a5d70ac0d110a77cd18d347490dc790a2822a6847fe7df892680284ee1862127baf859a39ff712bbf00659c0c35af23b63c0495cc833b6754424e747b4a3ae2ef7d35ceb1b6f7daa5881681c7029d7a7f04db92735ada94b38af9375d8efe77f55805bd25d85b2a8ca3a24b1e40ebb39a727ce3c4ebef5f82c4655f03ae1131d48ef8ba77387b36776de84ad11042cca9c1b98d750d69a852da16df388f4793e1b54289cd050dc8e1f85650b5507bf648c744fc76409503724462657a943e6525130acf61377b64d2a33912aa973886989a2ded9ae40ab64d768a7a1a33dbcd0ed5b80a83de5f1e7dc9d2de562d827669c620811c22557a149bc304be04dfc473b065f61ad145da2210129c515eeaa499d7929c8e7f62907f1ab4d51e81f3e17edcb6b955b4059fbe28957db7feabecd69f91850195f5aed099bdc45fcca3fe1def4ba230e2de22feec7a31a4a0c8c5698e8b2289cc56cbc4bbfdb31f32c0f3861bf453a2bd6ef3de0b1efcadc4da94707d48df5de42fc8dd6e8ead05c5626e4d197307665978d703c581cd13c508c003c203f00e765003bcb5f8c4fa0c58bb8ce145ae9a7e05f3f187a252e83c8265b8a47a2dcd13dd5260d031dba7e2b270780e1d766c0b385f840dc49ea851787ca7377c17b2021384e78bc28fb98f79d4b603edec4afd3ab163857a15afa1f875e586e25234f23297d4488095872b704035811c64de46027c3ce9e9017fa2aefe637d0d8cfe163ed698012f10ab6e3c7c03a56b45f44e0270d4e4ed2ddd048c21590e2cab12d0d364fa02e3e53b124ac64a9d14e4a6262be1af500e8880c39cbc8168f0b8d5b4836bc6ce40aaad72674223da3a9933944324e4980346c0e7c26276b0833c5220b5005be0900c1510d65644f51781decf0feec9430b9be2b5e919ab52ae3f8ba1c0cc1a523afc174ea8f83d3891b5a70650f68cd236c0c69886d7c06773b9087412b87eebbe00e0e7b378bebe61a005283d69f6031b4f1c92964ce3f4f2e1625b6bba24ea6dc84cba824d0a9ff1f34f2e398af1d0d6949ffb5b2395709162fab3a58c8b7964b3a4f635d92a280faf5741bb138f2a9836e50222b8087a7e92a4744a75c19e4e6395bd08d3116d4c6ec37a7b1079d114d9a8e3f5d41730930629ff044fe75e5f0860b8d29af71219af8a72ef512dcce03a13bd89b38c6b1e3107fba0407c7355cc8c6088106ce65f0a891b8fa67bd96a91089717001ab576c9199525c23e986d22c8b4c8413f2c6ad9f157bf7428f05d470bc1fcadf5d67b1817d37de08886076a6886b30608f7f4df2269c4bfb99483de9ddf131186c95b1b81fed115b1898656f2878b0cf3b5ba16777667f0c49ce76bc4bb7c24f5079dbf8534f11bd785b021157e00e46556fc583bda336f80a5b7818d557b86100e90006aa031f540ea95d1a0f8b7e704db1e2be100a797142dcc4df0265ced7ea555ddc334941ce4c106401897739bc726f1ea9edcd3ce83853df7b40e3aaf0b8d84ff71d6fe639c3c61cd6921b8acd8051dde0364b067d562730ea9582eb721d9644da2bc09c399ae62676683febf35a8cffd780a77dd296674d56e3b5eeb8d79735d21c8f127a8abea160044141aa685fa6b171b06f9a72cc54b2654d5224f6bd87ca9c4bbba770cd6995a5587474a0aba213e42b52d31960f882e0542356ff8afca94a5d58b8df93e3051042237ebc1638eafc522b5adb5d0463db5ea02bd76f10c362d77c3d055a9fc7b9a11c01a0c887c8f9423bb5ee32193d6ff97ac36149688fafca74ec1bba2cecf364db9bea1c33707bb96bdc877aa5b6926d0774f779527a0f3b92582d32dac35a39f1babdf465a06009d8b1fff1123d2aee35690ba0853460a97f8b9f04e8ab2375c454ffc81d42dab61ef3372d001c9c5454d1c69681791a8f13ce139151805de3258e03189bb8f5ed098ee32e4476a883c0739b33b7471c280397c77c90a93770e7059dae836d79cd86bf9bc8593faf5192c4a398b246a1c6bed5806342604f8efcd34691b62ee9815e9875846e956e40813b2693cc21cdf8332a086629ce8b615ae1cce0339e6234c5165f88b46c868043cec628a7c24d488614e1bd798fb05f6292e2750e364f6a19fb42e9db4bd7847079695259f500d75ab42664d89198a069fa32bf3b8f2bebb61e2459a3faee347d4821abc4535d8d048464ecd9de3f533c32c0a8d0c9e08e47dc2693ef168b1c79422499fcb8ff81c7511d02127a1d39249ad8c12442e7a79189d7071dce02dbd6c53dffdec745ea0a2d9c84370fa80ad49293b9549183940066aad87063f62ccb0fe350f4cf0247bb559f472fddedd23042e2a9dda50459103bfb96e7e18cd271afdddd9590dd5ff75a75b8aeeb5b2a1f13168178f891b844050cc15dd7f32b011a699b7bd1ef75caf97e9c0ac6d55a33dbc8166b4cc94bcac98155cd1d747a1a3288f2b2401d84bf4fc4f0e8b8bdc82aac2e7cea2972bce2f8e1467fdecd128469406a3faa71fb019ab8bc7f80944bf921151b663e2053aa64251ee7b8e5bbf759852f5875ec749495b2175eb44d01a3395e5a86c0a588e7efd16950a52cdf7f03a1e17c43915ccb5d36b66ba8c7972e2a0aac52e60b2b37a583264f826387fc95d44150c40d6c83bd3403f41122de67c0e161604a70a1c69198424ad96caf7fcc0be62363cd15fc2d9975abca9de7d77904490154d8eb09ab56a1845abc234b3be367ee4e4e83d4bf40d4421b6751276167fb107046fc533e7775d53b4fa00bd5b997fa9387a57657a65e41bbcb18b90433055461cef904ae27b302a35aa5dddf1f7f6d7774ccd3823621fef49e6b7fa7d10c603c1da4345b081e20981a508cde44e0c38bf03182636c23a6bf6dc9e5cafaf699293bd093771f2751edc125872fb4e13d2436538db2da5eed732a40adc439c8bdcabaa18af41e6683d53480d07952062cd4192badd9ad5af901049f626178a017bbadbb581e471202333d4800877c64a163bd55ef5e1a6bb7d822cd822f451fd07cafc37ab806d80ed2459026896cb5b4cdd785363b8e72108a2c98d24074ecb013f204f212b1789c26d71729fc12f101f0d6a04c16bd691b9183e0be140d17aad5e5d01dbbb66e9244e73e16655136c2666a5119efc2be757d3624329f9f0e298e37881c112026c237e886189c5527d456b97a4e93f55790f0859af8b088ed1471d09508df292e038bd7000b5d8576ad3d9c14feba03a7097bb22973a35fcdd9554434368f24ca0ba9da6ed45f6666d878aef6da021329fe274805014f46203e0670011d0f08977c61ed447326b6fc18db4f79e14fe5072f41ad6f3d0ef64c3f9f80fc248f101d39c62388f8b2dbb84a99b6bf4610cab692968f367925a2d292d1b767ca046d0224ad942a27175e9d95bce144592cdf659c4be3e8d984e3f3766a56bf7517a4df274d59abac8421e1204170bd6228d92d2163be054134a875e70d2c0e45cf3cfceb8f29808692555ddbb832798d41cfba8fb5134f0f07c6c181331820f2b2221d97e21cb5f04e85c271f69423a5a596cbe1501fb00f1ce5567cbd31b315954579a25d13c0d6ec18672b52f5a54459a36b396add0e617358a5e6f439ef43762fd8d2492bce0f2d3b5a61510aba8beced7685c6b283730754bad89771a394f1c515cd48dd15e410cea3a7b2d353935321079c0acd6cfc44231728367f83c4f96e15af39923a3d81efb9c82fd1136f80b2c6cc97800953f3b964d1866a4a3665481ca463cc16562e06e006d935352aa4635a754eee31ee60e01c68506e7c387793633ac0ccc4523b9b00d79f96049912629de02bdccc0d1524499cde0cc8cba93adb505eabbe8cbd9959d994630b5c603af4c51e4cabbfcba225ca8b7bad218429ce9cc55549d87bbd8b9f58c84e6c71244297b48aff06652b35d6640b8646672e32e2c87749bc121de757435d7dd9d30e510b363dd1e4d3f3c33d113303610ac845a020a8f363c2ba1b0c415553cf1634a556186d5e5d9e3b64d898e916dbbc03afae6e4ccb2fc82f39019201c0378a49561652d3c5d66d0de3157847ec22bc813483631ad8ba71bad054b44b7e3dd8a07791516305dd9d4fc91f0c5407a2945abe60a7065458ca6a91ed707d445c498f3643fc78dd65ac4e34f676da5244234bdfbc62935158a55cf8e7a7ca5fbc2d8eb2a4e82009c34877caa0589bba93a93f9c5403b4d58ed8cd7ed3438d52d9966fdd71ef8514e43f803c2b910c2d1fc9626fa2694873c31e6947e2bbdfd4da00e9b60a70be3ececc6f33f5e6183d5601505b8fe160277328465b8747216dbf1f844f96a0cdb88e5497f4f47351a34d16cff9d034c6c4644a31cf8b7f8ac05520c5480ac37fa7fb2a844b4e14724815f123cc9762de6d9cd350ad6b6cbc8ebc6287e50fce1e5be8152e9bf6434527657d03fba32a13aaa1fed439461b2d9c45c627caaf60617c5c0327a1c49ea39ee46db182c0bd1f623318e7a12a29c6efe4900ad075132a795bbd7533395f241236116f5c8f11125cee244fe5e7c9da7da5753ad7ea79cf8fa58bcc852f673b8f492a432dfc37226d9bb3023fea717bfb3b467ffc33d41d18d9384daef54d9db3b811a314314df5eb42fb1f971550d626d17323e7ae809b36d4a32ac1984128085c6d642486d745006a59dd36c38bfaa15fb8af40776cbd6d4ca771e329841fed06f9fae4ae426f5a7627ae6199577ebe03881b95082ce0768016700c4b072cbc547eef520d601d4813a8b613941662dec94a33cb812261d4c2c819371166f2f2e5eaa57abd8717ca7df60c85ef43c12efa63de0f31e0fbf88e95c2014a792e8ea70e1bd7eb4853c53f161e23f319e262a52913079b3e1b7cf06e8db03a034092abe83fa93ec1ee5a417ae686c54b2f6b9c8f7775af62e6e8b9fc17656e3fb5fd3a36b9be4af5528a01505c21497ad56967e991e48f5f4cfffaeb8c114c4e891e8f95f4e0a33a3865d333da2b2f7281e9fd4757f700ba1b6b879120161defa31a5a1d52d04a31e1e3dc31ac02795290e435db20091ca6e10858d2147d9f5f368e5a8f5503543c423c460a164536a6d6f98366c77cc43367439a0663d9f295849e8775e7bdfe4090a394e95e52c81adbf6bd3e34e9c2bb9edc1482ecac09ac43b8e01995c3ace149d4fd0913908e32d4a2126a2a4c1b7b4f962f05eaf0f930f71e35ca5dbe4408a56032c0654d80d53973af6c4616ab6af04effc3516c486561f863d8e5ba7a699bb850511be92cf6920d0523dd4f775d1dd66f7016dcca1a6284e8908b2a9fc30d88e78e255d708bdbfbc351f1592ebc71be9d290210bfed09b9d7197c62a19eb17018e28cb64b132e7dae9a6669f3ddb384135867038a4384c80b5ca3d7082307098fd78717efe86d589f84f53d5a19b1877f98c6db69a4e1ea1e88f92c403f147ccb6b120eff0b5a71c4ca8b88e761551b7483a91b92c46a9f1b367b08baca1eba3ea99d792ad8bc6601ab5d964e89777556bfaae6a3e02328641162bbc117cbf935e1c9a038045da3718f6a1d306a5e867c7efc3d249e2fdb9c1d4ec89e8ad5c5cddd77845877ff0a96415f65db248f2576a2dcb044ad818df29ebe5376b8a30"}, 0x1004) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 23:05:45 executing program 4: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x108) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9a0340030000100017a1279ea0e1108020008000f030400020008000403100022220300020206000701010002020000070904dc0900ffff"], 0x39) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "bb0c2b377c72f71f3a3d742af02b4e8fd5d5e1589e35feffb445ab4b71ea39f91e2d2e41d600f196ad957d98f95d7628b78a6213f4c769dabb329e01f608592e3859b73233906b700415a0671c5aa82a1148ddebec76de513728e74e779fe0a1f607df652e58a9154813b57351304ac8c26e7a83aeb0f935a2422f64140dcea90363cc2f5a725081e0c19792d443dc7dbb5bd67256996c9d39f4910c5d8f066eb7"}, 0xa5) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) [ 274.914491][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 274.937013][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 23:05:45 executing program 4: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x108) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9a0340030000100017a1279ea0e1108020008000f030400020008000403100022220300020206000701010002020000070904dc0900ffff"], 0x39) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "bb0c2b377c72f71f3a3d742af02b4e8fd5d5e1589e35feffb445ab4b71ea39f91e2d2e41d600f196ad957d98f95d7628b78a6213f4c769dabb329e01f608592e3859b73233906b700415a0671c5aa82a1148ddebec76de513728e74e779fe0a1f607df652e58a9154813b57351304ac8c26e7a83aeb0f935a2422f64140dcea90363cc2f5a725081e0c19792d443dc7dbb5bd67256996c9d39f4910c5d8f066eb7"}, 0xa5) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) [ 274.991857][ T6090] bond0: (slave team0): Enslaving as an active interface with an up link 23:05:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbff3f26, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'veth0_macvtap\x00', {0x1}, 0x200}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="89080000000100000740000000030e9c00002000000000005c53ff0f0000000000000100010000010000ffffff7f0000000006000200000000002900000000000000ffffff7f00000000010100000000"], 0x50) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) (async) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbff3f26, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'veth0_macvtap\x00', {0x1}, 0x200}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="89080000000100000740000000030e9c00002000000000005c53ff0f0000000000000100010000010000ffffff7f0000000006000200000000002900000000000000ffffff7f00000000010100000000"], 0x50) (async) [ 275.006828][ T3636] Bluetooth: hci3: SCO packet for unknown connection handle 316 [ 275.037398][ T6101] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 275.138192][ T6101] bond0: (slave team0): Releasing backup interface [ 275.160394][ T6101] bridge0: port 3(team0) entered blocking state [ 275.174607][ T6101] bridge0: port 3(team0) entered disabled state [ 275.187073][ T6101] device team0 entered promiscuous mode [ 275.193515][ T6101] device team_slave_0 entered promiscuous mode [ 275.200581][ T6101] device team_slave_1 entered promiscuous mode [ 275.217423][ T4982] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 275.577440][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.588596][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.598495][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 275.607675][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.617994][ T4982] usb 4-1: config 0 descriptor?? [ 276.157392][ T4982] usbhid 4-1:0.0: can't add hid device: -71 [ 276.163427][ T4982] usbhid: probe of 4-1:0.0 failed with error -71 [ 276.173239][ T4982] usb 4-1: USB disconnect, device number 33 23:05:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x24202, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_elf32(r0, &(0x7f0000001240)=ANY=[@ANYRES16=r2, @ANYRES8, @ANYRES8=r0], 0x7ffff000) r3 = openat$null(0xffffff9c, &(0x7f0000000040), 0x301901, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000240)={{r4}, 0x0, 0x0, @inherit={0x78, &(0x7f00000001c0)={0x1, 0x6, 0x0, 0x5, {0x4, 0x8cc8, 0x101, 0xafe, 0x7}, [0x0, 0x4, 0xf3, 0x6e, 0x8000, 0x2]}}, @subvolid=0xff}) r5 = syz_clone(0x24002080, &(0x7f0000000080)="1adbf80f77a489c4fc11bfa1ec23c227a84032d5e6d85dec60b18d59d32077956ca072b59625566947abfe391829abb61da24f855fead5b5b2ac5f30675dfc60f2bc791f7bd47b9d967fc99579c4d60468f14a461f47d3c69280439655313f1f5de144d176214d265d0de418", 0x6c, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="dcb6389127e5366b049de00e7b638cccf9ed26e6ce9629420bc936d1e8a1caaf4917520a4f4a46e1b93678a3d0") fcntl$setown(r3, 0x8, r5) fsync(r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x24202, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) write$binfmt_elf32(r0, &(0x7f0000001240)=ANY=[@ANYRES16=r2, @ANYRES8, @ANYRES8=r0], 0x7ffff000) (async) openat$null(0xffffff9c, &(0x7f0000000040), 0x301901, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r4) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000240)={{r4}, 0x0, 0x0, @inherit={0x78, &(0x7f00000001c0)={0x1, 0x6, 0x0, 0x5, {0x4, 0x8cc8, 0x101, 0xafe, 0x7}, [0x0, 0x4, 0xf3, 0x6e, 0x8000, 0x2]}}, @subvolid=0xff}) (async) syz_clone(0x24002080, &(0x7f0000000080)="1adbf80f77a489c4fc11bfa1ec23c227a84032d5e6d85dec60b18d59d32077956ca072b59625566947abfe391829abb61da24f855fead5b5b2ac5f30675dfc60f2bc791f7bd47b9d967fc99579c4d60468f14a461f47d3c69280439655313f1f5de144d176214d265d0de418", 0x6c, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="dcb6389127e5366b049de00e7b638cccf9ed26e6ce9629420bc936d1e8a1caaf4917520a4f4a46e1b93678a3d0") (async) fcntl$setown(r3, 0x8, r5) (async) fsync(r0) (async) 23:05:46 executing program 2: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9802200600009002e070800980004000002010404000000000e672615080126e80000000000bf33856c633e6179e3d12ed4235fd44cac8a75fa92a708629cb2aa8d7abf9772a11d6ab87eab540cd9725a4772c6b24af17b5b23f307000000203e09c62f736459b13c6a31116b4ec2c98db159387d252442293c87d302507121bd39f6c4da990e5ca210ab3551c85d94e98b32bd39bcf7989da2fdd2e90eff244e5c2d45e8"], 0x27) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x13c, 0xa7}, "cf34557eaec1844a382460a397e1ab1965125681836ecbfc2e6ed6d25c352ce1725086084c9b02d638e619ed39338fed6c0621c6952c7b320f9389c424e1ff675cf63ca5dabc5fc2bf6d4ef9380f9e9b165ae6969838e32f247d8b869e0decbb1aa0d3ea15749d9e6abe560c9cf077104913184958930276664c96f987efd9a0be566db3e1ea0bbaa721839a7e018b82958ce8a443bc67b4c15aaed2ee75f854fe1887853d8bdb"}, 0xab) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="f4040402c90040"], 0x7) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "86c49a17780c992a6f5437b5cab7c2a9d442bebf1756435d2adf27c1d44d3d7ae4aa1e9e095d2607fc6d90bdde1ffd0f1dde925e0c93b257c0820e4365d37807e50a2d789050f5597a1e5f5a43bb50bd5b4b1a5dc67553202496ec018074cbbb64d018834b006c3384a18da4d0542f7bcdc67a5d70ac0d110a77cd18d347490dc790a2822a6847fe7df892680284ee1862127baf859a39ff712bbf00659c0c35af23b63c0495cc833b6754424e747b4a3ae2ef7d35ceb1b6f7daa5881681c7029d7a7f04db92735ada94b38af9375d8efe77f55805bd25d85b2a8ca3a24b1e40ebb39a727ce3c4ebef5f82c4655f03ae1131d48ef8ba77387b36776de84ad11042cca9c1b98d750d69a852da16df388f4793e1b54289cd050dc8e1f85650b5507bf648c744fc76409503724462657a943e6525130acf61377b64d2a33912aa973886989a2ded9ae40ab64d768a7a1a33dbcd0ed5b80a83de5f1e7dc9d2de562d827669c620811c22557a149bc304be04dfc473b065f61ad145da2210129c515eeaa499d7929c8e7f62907f1ab4d51e81f3e17edcb6b955b4059fbe28957db7feabecd69f91850195f5aed099bdc45fcca3fe1def4ba230e2de22feec7a31a4a0c8c5698e8b2289cc56cbc4bbfdb31f32c0f3861bf453a2bd6ef3de0b1efcadc4da94707d48df5de42fc8dd6e8ead05c5626e4d197307665978d703c581cd13c508c003c203f00e765003bcb5f8c4fa0c58bb8ce145ae9a7e05f3f187a252e83c8265b8a47a2dcd13dd5260d031dba7e2b270780e1d766c0b385f840dc49ea851787ca7377c17b2021384e78bc28fb98f79d4b603edec4afd3ab163857a15afa1f875e586e25234f23297d4488095872b704035811c64de46027c3ce9e9017fa2aefe637d0d8cfe163ed698012f10ab6e3c7c03a56b45f44e0270d4e4ed2ddd048c21590e2cab12d0d364fa02e3e53b124ac64a9d14e4a6262be1af500e8880c39cbc8168f0b8d5b4836bc6ce40aaad72674223da3a9933944324e4980346c0e7c26276b0833c5220b5005be0900c1510d65644f51781decf0feec9430b9be2b5e919ab52ae3f8ba1c0cc1a523afc174ea8f83d3891b5a70650f68cd236c0c69886d7c06773b9087412b87eebbe00e0e7b378bebe61a005283d69f6031b4f1c92964ce3f4f2e1625b6bba24ea6dc84cba824d0a9ff1f34f2e398af1d0d6949ffb5b2395709162fab3a58c8b7964b3a4f635d92a280faf5741bb138f2a9836e50222b8087a7e92a4744a75c19e4e6395bd08d3116d4c6ec37a7b1079d114d9a8e3f5d41730930629ff044fe75e5f0860b8d29af71219af8a72ef512dcce03a13bd89b38c6b1e3107fba0407c7355cc8c6088106ce65f0a891b8fa67bd96a91089717001ab576c9199525c23e986d22c8b4c8413f2c6ad9f157bf7428f05d470bc1fcadf5d67b1817d37de08886076a6886b30608f7f4df2269c4bfb99483de9ddf131186c95b1b81fed115b1898656f2878b0cf3b5ba16777667f0c49ce76bc4bb7c24f5079dbf8534f11bd785b021157e00e46556fc583bda336f80a5b7818d557b86100e90006aa031f540ea95d1a0f8b7e704db1e2be100a797142dcc4df0265ced7ea555ddc334941ce4c106401897739bc726f1ea9edcd3ce83853df7b40e3aaf0b8d84ff71d6fe639c3c61cd6921b8acd8051dde0364b067d562730ea9582eb721d9644da2bc09c399ae62676683febf35a8cffd780a77dd296674d56e3b5eeb8d79735d21c8f127a8abea160044141aa685fa6b171b06f9a72cc54b2654d5224f6bd87ca9c4bbba770cd6995a5587474a0aba213e42b52d31960f882e0542356ff8afca94a5d58b8df93e3051042237ebc1638eafc522b5adb5d0463db5ea02bd76f10c362d77c3d055a9fc7b9a11c01a0c887c8f9423bb5ee32193d6ff97ac36149688fafca74ec1bba2cecf364db9bea1c33707bb96bdc877aa5b6926d0774f779527a0f3b92582d32dac35a39f1babdf465a06009d8b1fff1123d2aee35690ba0853460a97f8b9f04e8ab2375c454ffc81d42dab61ef3372d001c9c5454d1c69681791a8f13ce139151805de3258e03189bb8f5ed098ee32e4476a883c0739b33b7471c280397c77c90a93770e7059dae836d79cd86bf9bc8593faf5192c4a398b246a1c6bed5806342604f8efcd34691b62ee9815e9875846e956e40813b2693cc21cdf8332a086629ce8b615ae1cce0339e6234c5165f88b46c868043cec628a7c24d488614e1bd798fb05f6292e2750e364f6a19fb42e9db4bd7847079695259f500d75ab42664d89198a069fa32bf3b8f2bebb61e2459a3faee347d4821abc4535d8d048464ecd9de3f533c32c0a8d0c9e08e47dc2693ef168b1c79422499fcb8ff81c7511d02127a1d39249ad8c12442e7a79189d7071dce02dbd6c53dffdec745ea0a2d9c84370fa80ad49293b9549183940066aad87063f62ccb0fe350f4cf0247bb559f472fddedd23042e2a9dda50459103bfb96e7e18cd271afdddd9590dd5ff75a75b8aeeb5b2a1f13168178f891b844050cc15dd7f32b011a699b7bd1ef75caf97e9c0ac6d55a33dbc8166b4cc94bcac98155cd1d747a1a3288f2b2401d84bf4fc4f0e8b8bdc82aac2e7cea2972bce2f8e1467fdecd128469406a3faa71fb019ab8bc7f80944bf921151b663e2053aa64251ee7b8e5bbf759852f5875ec749495b2175eb44d01a3395e5a86c0a588e7efd16950a52cdf7f03a1e17c43915ccb5d36b66ba8c7972e2a0aac52e60b2b37a583264f826387fc95d44150c40d6c83bd3403f41122de67c0e161604a70a1c69198424ad96caf7fcc0be62363cd15fc2d9975abca9de7d77904490154d8eb09ab56a1845abc234b3be367ee4e4e83d4bf40d4421b6751276167fb107046fc533e7775d53b4fa00bd5b997fa9387a57657a65e41bbcb18b90433055461cef904ae27b302a35aa5dddf1f7f6d7774ccd3823621fef49e6b7fa7d10c603c1da4345b081e20981a508cde44e0c38bf03182636c23a6bf6dc9e5cafaf699293bd093771f2751edc125872fb4e13d2436538db2da5eed732a40adc439c8bdcabaa18af41e6683d53480d07952062cd4192badd9ad5af901049f626178a017bbadbb581e471202333d4800877c64a163bd55ef5e1a6bb7d822cd822f451fd07cafc37ab806d80ed2459026896cb5b4cdd785363b8e72108a2c98d24074ecb013f204f212b1789c26d71729fc12f101f0d6a04c16bd691b9183e0be140d17aad5e5d01dbbb66e9244e73e16655136c2666a5119efc2be757d3624329f9f0e298e37881c112026c237e886189c5527d456b97a4e93f55790f0859af8b088ed1471d09508df292e038bd7000b5d8576ad3d9c14feba03a7097bb22973a35fcdd9554434368f24ca0ba9da6ed45f6666d878aef6da021329fe274805014f46203e0670011d0f08977c61ed447326b6fc18db4f79e14fe5072f41ad6f3d0ef64c3f9f80fc248f101d39c62388f8b2dbb84a99b6bf4610cab692968f367925a2d292d1b767ca046d0224ad942a27175e9d95bce144592cdf659c4be3e8d984e3f3766a56bf7517a4df274d59abac8421e1204170bd6228d92d2163be054134a875e70d2c0e45cf3cfceb8f29808692555ddbb832798d41cfba8fb5134f0f07c6c181331820f2b2221d97e21cb5f04e85c271f69423a5a596cbe1501fb00f1ce5567cbd31b315954579a25d13c0d6ec18672b52f5a54459a36b396add0e617358a5e6f439ef43762fd8d2492bce0f2d3b5a61510aba8beced7685c6b283730754bad89771a394f1c515cd48dd15e410cea3a7b2d353935321079c0acd6cfc44231728367f83c4f96e15af39923a3d81efb9c82fd1136f80b2c6cc97800953f3b964d1866a4a3665481ca463cc16562e06e006d935352aa4635a754eee31ee60e01c68506e7c387793633ac0ccc4523b9b00d79f96049912629de02bdccc0d1524499cde0cc8cba93adb505eabbe8cbd9959d994630b5c603af4c51e4cabbfcba225ca8b7bad218429ce9cc55549d87bbd8b9f58c84e6c71244297b48aff06652b35d6640b8646672e32e2c87749bc121de757435d7dd9d30e510b363dd1e4d3f3c33d113303610ac845a020a8f363c2ba1b0c415553cf1634a556186d5e5d9e3b64d898e916dbbc03afae6e4ccb2fc82f39019201c0378a49561652d3c5d66d0de3157847ec22bc813483631ad8ba71bad054b44b7e3dd8a07791516305dd9d4fc91f0c5407a2945abe60a7065458ca6a91ed707d445c498f3643fc78dd65ac4e34f676da5244234bdfbc62935158a55cf8e7a7ca5fbc2d8eb2a4e82009c34877caa0589bba93a93f9c5403b4d58ed8cd7ed3438d52d9966fdd71ef8514e43f803c2b910c2d1fc9626fa2694873c31e6947e2bbdfd4da00e9b60a70be3ececc6f33f5e6183d5601505b8fe160277328465b8747216dbf1f844f96a0cdb88e5497f4f47351a34d16cff9d034c6c4644a31cf8b7f8ac05520c5480ac37fa7fb2a844b4e14724815f123cc9762de6d9cd350ad6b6cbc8ebc6287e50fce1e5be8152e9bf6434527657d03fba32a13aaa1fed439461b2d9c45c627caaf60617c5c0327a1c49ea39ee46db182c0bd1f623318e7a12a29c6efe4900ad075132a795bbd7533395f241236116f5c8f11125cee244fe5e7c9da7da5753ad7ea79cf8fa58bcc852f673b8f492a432dfc37226d9bb3023fea717bfb3b467ffc33d41d18d9384daef54d9db3b811a314314df5eb42fb1f971550d626d17323e7ae809b36d4a32ac1984128085c6d642486d745006a59dd36c38bfaa15fb8af40776cbd6d4ca771e329841fed06f9fae4ae426f5a7627ae6199577ebe03881b95082ce0768016700c4b072cbc547eef520d601d4813a8b613941662dec94a33cb812261d4c2c819371166f2f2e5eaa57abd8717ca7df60c85ef43c12efa63de0f31e0fbf88e95c2014a792e8ea70e1bd7eb4853c53f161e23f319e262a52913079b3e1b7cf06e8db03a034092abe83fa93ec1ee5a417ae686c54b2f6b9c8f7775af62e6e8b9fc17656e3fb5fd3a36b9be4af5528a01505c21497ad56967e991e48f5f4cfffaeb8c114c4e891e8f95f4e0a33a3865d333da2b2f7281e9fd4757f700ba1b6b879120161defa31a5a1d52d04a31e1e3dc31ac02795290e435db20091ca6e10858d2147d9f5f368e5a8f5503543c423c460a164536a6d6f98366c77cc43367439a0663d9f295849e8775e7bdfe4090a394e95e52c81adbf6bd3e34e9c2bb9edc1482ecac09ac43b8e01995c3ace149d4fd0913908e32d4a2126a2a4c1b7b4f962f05eaf0f930f71e35ca5dbe4408a56032c0654d80d53973af6c4616ab6af04effc3516c486561f863d8e5ba7a699bb850511be92cf6920d0523dd4f775d1dd66f7016dcca1a6284e8908b2a9fc30d88e78e255d708bdbfbc351f1592ebc71be9d290210bfed09b9d7197c62a19eb17018e28cb64b132e7dae9a6669f3ddb384135867038a4384c80b5ca3d7082307098fd78717efe86d589f84f53d5a19b1877f98c6db69a4e1ea1e88f92c403f147ccb6b120eff0b5a71c4ca8b88e761551b7483a91b92c46a9f1b367b08baca1eba3ea99d792ad8bc6601ab5d964e89777556bfaae6a3e02328641162bbc117cbf935e1c9a038045da3718f6a1d306a5e867c7efc3d249e2fdb9c1d4ec89e8ad5c5cddd77845877ff0a96415f65db248f2576a2dcb044ad818df29ebe5376b8a30"}, 0x1004) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9802200600009002e070800980004000002010404000000000e672615080126e80000000000bf33856c633e6179e3d12ed4235fd44cac8a75fa92a708629cb2aa8d7abf9772a11d6ab87eab540cd9725a4772c6b24af17b5b23f307000000203e09c62f736459b13c6a31116b4ec2c98db159387d252442293c87d302507121bd39f6c4da990e5ca210ab3551c85d94e98b32bd39bcf7989da2fdd2e90eff244e5c2d45e8"], 0x27) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x13c, 0xa7}, "cf34557eaec1844a382460a397e1ab1965125681836ecbfc2e6ed6d25c352ce1725086084c9b02d638e619ed39338fed6c0621c6952c7b320f9389c424e1ff675cf63ca5dabc5fc2bf6d4ef9380f9e9b165ae6969838e32f247d8b869e0decbb1aa0d3ea15749d9e6abe560c9cf077104913184958930276664c96f987efd9a0be566db3e1ea0bbaa721839a7e018b82958ce8a443bc67b4c15aaed2ee75f854fe1887853d8bdb"}, 0xab) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="f4040402c90040"], 0x7) (async) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 23:05:46 executing program 4: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x108) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9a0340030000100017a1279ea0e1108020008000f030400020008000403100022220300020206000701010002020000070904dc0900ffff"], 0x39) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "bb0c2b377c72f71f3a3d742af02b4e8fd5d5e1589e35feffb445ab4b71ea39f91e2d2e41d600f196ad957d98f95d7628b78a6213f4c769dabb329e01f608592e3859b73233906b700415a0671c5aa82a1148ddebec76de513728e74e779fe0a1f607df652e58a9154813b57351304ac8c26e7a83aeb0f935a2422f64140dcea90363cc2f5a725081e0c19792d443dc7dbb5bd67256996c9d39f4910c5d8f066eb7"}, 0xa5) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x108) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9a0340030000100017a1279ea0e1108020008000f030400020008000403100022220300020206000701010002020000070904dc0900ffff"], 0x39) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "bb0c2b377c72f71f3a3d742af02b4e8fd5d5e1589e35feffb445ab4b71ea39f91e2d2e41d600f196ad957d98f95d7628b78a6213f4c769dabb329e01f608592e3859b73233906b700415a0671c5aa82a1148ddebec76de513728e74e779fe0a1f607df652e58a9154813b57351304ac8c26e7a83aeb0f935a2422f64140dcea90363cc2f5a725081e0c19792d443dc7dbb5bd67256996c9d39f4910c5d8f066eb7"}, 0xa5) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) (async) 23:05:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) (async) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbff3f26, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'veth0_macvtap\x00', {0x1}, 0x200}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="89080000000100000740000000030e9c00002000000000005c53ff0f0000000000000100010000010000ffffff7f0000000006000200000000002900000000000000ffffff7f00000000010100000000"], 0x50) 23:05:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="fe9847af2e3ce4a5880f4f8b94380b", 0xf}], 0x1, &(0x7f0000000240)=[{0x1c, 0x10f, 0x40, "0ea69045a864f2da31df02c63aec4abb"}], 0x1c}, 0x44000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 276.614228][ T3636] Bluetooth: hci3: SCO packet for unknown connection handle 316 [ 276.620609][ T6134] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 23:05:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="fe9847af2e3ce4a5880f4f8b94380b", 0xf}], 0x1, &(0x7f0000000240)=[{0x1c, 0x10f, 0x40, "0ea69045a864f2da31df02c63aec4abb"}], 0x1c}, 0x44000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 23:05:46 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x10701792af13ae6f, 0x0, 0x1}, @l2cap_cid_le_signaling={{}, @l2cap_conn_param_update_rsp={{0x13, 0x81}}}}, 0xffffffffffffff4a) [ 276.664844][ T6134] device team0 left promiscuous mode [ 276.670956][ T6134] device team_slave_0 left promiscuous mode [ 276.677806][ T6134] device team_slave_1 left promiscuous mode [ 276.685431][ T6134] bridge0: port 3(team0) entered disabled state [ 276.693466][ T3636] Bluetooth: hci3: SCO packet for unknown connection handle 316 23:05:46 executing program 2: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9802200600009002e070800980004000002010404000000000e672615080126e80000000000bf33856c633e6179e3d12ed4235fd44cac8a75fa92a708629cb2aa8d7abf9772a11d6ab87eab540cd9725a4772c6b24af17b5b23f307000000203e09c62f736459b13c6a31116b4ec2c98db159387d252442293c87d302507121bd39f6c4da990e5ca210ab3551c85d94e98b32bd39bcf7989da2fdd2e90eff244e5c2d45e8"], 0x27) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x13c, 0xa7}, "cf34557eaec1844a382460a397e1ab1965125681836ecbfc2e6ed6d25c352ce1725086084c9b02d638e619ed39338fed6c0621c6952c7b320f9389c424e1ff675cf63ca5dabc5fc2bf6d4ef9380f9e9b165ae6969838e32f247d8b869e0decbb1aa0d3ea15749d9e6abe560c9cf077104913184958930276664c96f987efd9a0be566db3e1ea0bbaa721839a7e018b82958ce8a443bc67b4c15aaed2ee75f854fe1887853d8bdb"}, 0xab) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="f4040402c90040"], 0x7) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9802200600009002e070800980004000002010404000000000e672615080126e80000000000bf33856c633e6179e3d12ed4235fd44cac8a75fa92a708629cb2aa8d7abf9772a11d6ab87eab540cd9725a4772c6b24af17b5b23f307000000203e09c62f736459b13c6a31116b4ec2c98db159387d252442293c87d302507121bd39f6c4da990e5ca210ab3551c85d94e98b32bd39bcf7989da2fdd2e90eff244e5c2d45e8"], 0x27) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x13c, 0xa7}, "cf34557eaec1844a382460a397e1ab1965125681836ecbfc2e6ed6d25c352ce1725086084c9b02d638e619ed39338fed6c0621c6952c7b320f9389c424e1ff675cf63ca5dabc5fc2bf6d4ef9380f9e9b165ae6969838e32f247d8b869e0decbb1aa0d3ea15749d9e6abe560c9cf077104913184958930276664c96f987efd9a0be566db3e1ea0bbaa721839a7e018b82958ce8a443bc67b4c15aaed2ee75f854fe1887853d8bdb"}, 0xab) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="f4040402c90040"], 0x7) (async) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) [ 276.706629][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.722744][ T6134] bond0: (slave team0): Enslaving as an active interface with an up link [ 276.733088][ T6134] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 276.774524][ T6134] bond0: (slave team0): Releasing backup interface [ 276.791664][ T6134] bridge0: port 3(team0) entered blocking state [ 276.799135][ T6134] bridge0: port 3(team0) entered disabled state [ 276.806647][ T6134] device team0 entered promiscuous mode [ 276.812910][ T6134] device team_slave_0 entered promiscuous mode [ 276.819765][ T6134] device team_slave_1 entered promiscuous mode 23:05:47 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x10701792af13ae6f, 0x0, 0x1}, @l2cap_cid_le_signaling={{}, @l2cap_conn_param_update_rsp={{0x13, 0x81}}}}, 0xffffffffffffff4a) [ 276.845771][ T3636] Bluetooth: hci3: SCO packet for unknown connection handle 316 [ 276.847969][ T3636] Bluetooth: hci3: SCO packet for unknown connection handle 316 [ 276.856958][ T6166] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 23:05:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x24202, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_elf32(r0, &(0x7f0000001240)=ANY=[@ANYRES16=r2, @ANYRES8, @ANYRES8=r0], 0x7ffff000) r3 = openat$null(0xffffff9c, &(0x7f0000000040), 0x301901, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) (async, rerun: 64) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000240)={{r4}, 0x0, 0x0, @inherit={0x78, &(0x7f00000001c0)={0x1, 0x6, 0x0, 0x5, {0x4, 0x8cc8, 0x101, 0xafe, 0x7}, [0x0, 0x4, 0xf3, 0x6e, 0x8000, 0x2]}}, @subvolid=0xff}) (async, rerun: 64) r5 = syz_clone(0x24002080, &(0x7f0000000080)="1adbf80f77a489c4fc11bfa1ec23c227a84032d5e6d85dec60b18d59d32077956ca072b59625566947abfe391829abb61da24f855fead5b5b2ac5f30675dfc60f2bc791f7bd47b9d967fc99579c4d60468f14a461f47d3c69280439655313f1f5de144d176214d265d0de418", 0x6c, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="dcb6389127e5366b049de00e7b638cccf9ed26e6ce9629420bc936d1e8a1caaf4917520a4f4a46e1b93678a3d0") fcntl$setown(r3, 0x8, r5) (async, rerun: 64) fsync(r0) (rerun: 64) 23:05:47 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000001440)={0x6000, 0x1f, 0x3, 0x7ff, 0x9, "2335ac282fdb2e6c"}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x47, 0x155101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000001680)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{r2, 0x2, 0x2, 0x6, 0x8000000000000000, 0xffffffffffffcaa8, 0x7, 0x4, 0x7ff, 0x2, 0x3, 0xffffffff00000001, 0x6, 0x0, 0x2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '0'}, {0x20, '(!/'}, {0x20, '/dev/dlm-monitor\x00'}, {}, {0x20, '/dev/snd/midiC#D#\x00'}, {}], 0xa, "3fc5ca4a287b72d12336321dfaf9f69009d930b474f4471a6ed424947046920eca6661b9554e3e1634c550f52497365fcd1f22a7e67b8c3e4c48"}, 0x72) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000001880)={0x4, "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"}) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81e8943c, &(0x7f0000001240)) [ 276.946388][ T6166] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.957346][ T3166] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 276.980983][ T6166] bond0: (slave team0): Enslaving as an active interface with an up link [ 277.021047][ T6174] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 277.036249][ T6174] bond0: (slave team0): Releasing backup interface [ 277.089264][ T6174] bridge0: port 3(team0) entered blocking state [ 277.095889][ T6174] bridge0: port 3(team0) entered disabled state [ 277.104793][ T6174] device team0 entered promiscuous mode [ 277.113006][ T6174] device team_slave_0 entered promiscuous mode [ 277.119845][ T6174] device team_slave_1 entered promiscuous mode [ 277.367552][ T3166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.384567][ T3166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.397999][ T3166] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 277.414000][ T3166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.436494][ T3166] usb 4-1: config 0 descriptor?? [ 277.987362][ T3166] usbhid 4-1:0.0: can't add hid device: -71 [ 277.993395][ T3166] usbhid: probe of 4-1:0.0 failed with error -71 [ 278.002319][ T3166] usb 4-1: USB disconnect, device number 34 23:05:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:48 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x10701792af13ae6f, 0x0, 0x1}, @l2cap_cid_le_signaling={{}, @l2cap_conn_param_update_rsp={{0x13, 0x81}}}}, 0xffffffffffffff4a) 23:05:48 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="fe9847af2e3ce4a5880f4f8b94380b", 0xf}], 0x1, &(0x7f0000000240)=[{0x1c, 0x10f, 0x40, "0ea69045a864f2da31df02c63aec4abb"}], 0x1c}, 0x44000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 23:05:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="fe9847af2e3ce4a5880f4f8b94380b", 0xf}], 0x1, &(0x7f0000000240)=[{0x1c, 0x10f, 0x40, "0ea69045a864f2da31df02c63aec4abb"}], 0x1c}, 0x44000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 23:05:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbff3f26, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'veth0_macvtap\x00', {0x1}, 0x200}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="89080000000100000740000000030e9c00002000000000005c53ff0f0000000000000100010000010000ffffff7f0000000006000200000000002900000000000000ffffff7f00000000010100000000"], 0x50) 23:05:48 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000001440)={0x6000, 0x1f, 0x3, 0x7ff, 0x9, "2335ac282fdb2e6c"}) (async) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x47, 0x155101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000001680)={0x0}) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{r2, 0x2, 0x2, 0x6, 0x8000000000000000, 0xffffffffffffcaa8, 0x7, 0x4, 0x7ff, 0x2, 0x3, 0xffffffff00000001, 0x6, 0x0, 0x2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 64) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '0'}, {0x20, '(!/'}, {0x20, '/dev/dlm-monitor\x00'}, {}, {0x20, '/dev/snd/midiC#D#\x00'}, {}], 0xa, "3fc5ca4a287b72d12336321dfaf9f69009d930b474f4471a6ed424947046920eca6661b9554e3e1634c550f52497365fcd1f22a7e67b8c3e4c48"}, 0x72) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000001880)={0x4, "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"}) (async, rerun: 64) r7 = dup(r5) (rerun: 64) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81e8943c, &(0x7f0000001240)) 23:05:48 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x40, 0xc8, 0x3d}}}, 0x6) [ 278.458704][ T6192] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 278.479218][ T6192] device team0 left promiscuous mode [ 278.484869][ T6192] device team_slave_0 left promiscuous mode [ 278.500781][ T6192] device team_slave_1 left promiscuous mode 23:05:48 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x40, 0xc8, 0x3d}}}, 0x6) [ 278.525262][ T6192] bridge0: port 3(team0) entered disabled state [ 278.533342][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 278.544027][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.555184][ T6192] bond0: (slave team0): Enslaving as an active interface with an up link [ 278.566919][ T6193] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 23:05:48 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x40, 0xc8, 0x3d}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x40, 0xc8, 0x3d}}}, 0x6) (async) [ 278.591554][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 278.601569][ T6193] device team0 left promiscuous mode [ 278.614529][ T6193] device team_slave_0 left promiscuous mode 23:05:48 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0xa29b, 0x3f, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x54, 0x8}, {0x0, 0x90, 0x3ff, 0xfffe}}, @l2cap_conf_rsp={{0x5, 0x81, 0x18}, {0x5, 0x3f, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x7ff, 0xfffffc5e, 0x200}}]}}]}}, 0x3a) [ 278.640225][ T6193] device team_slave_1 left promiscuous mode [ 278.646556][ T6193] bridge0: port 3(team0) entered disabled state [ 278.663534][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 278.671064][ T3636] Bluetooth: hci1: wrong event for mode 0 23:05:48 executing program 2: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000001440)={0x6000, 0x1f, 0x3, 0x7ff, 0x9, "2335ac282fdb2e6c"}) (async) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) (async, rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x47, 0x155101) (rerun: 64) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000001680)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{r2, 0x2, 0x2, 0x6, 0x8000000000000000, 0xffffffffffffcaa8, 0x7, 0x4, 0x7ff, 0x2, 0x3, 0xffffffff00000001, 0x6, 0x0, 0x2}}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '0'}, {0x20, '(!/'}, {0x20, '/dev/dlm-monitor\x00'}, {}, {0x20, '/dev/snd/midiC#D#\x00'}, {}], 0xa, "3fc5ca4a287b72d12336321dfaf9f69009d930b474f4471a6ed424947046920eca6661b9554e3e1634c550f52497365fcd1f22a7e67b8c3e4c48"}, 0x72) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async, rerun: 32) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000001880)={0x4, "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"}) (async) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81e8943c, &(0x7f0000001240)) (rerun: 32) [ 278.694414][ T3636] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 278.702533][ T3636] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 278.704717][ T6193] 8021q: adding VLAN 0 to HW filter on device team0 23:05:48 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0xa29b, 0x3f, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x54, 0x8}, {0x0, 0x90, 0x3ff, 0xfffe}}, @l2cap_conf_rsp={{0x5, 0x81, 0x18}, {0x5, 0x3f, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x7ff, 0xfffffc5e, 0x200}}]}}]}}, 0x3a) [ 278.739046][ T6193] bond0: (slave team0): Enslaving as an active interface with an up link [ 278.755562][ T6199] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 278.765371][ T6199] bond0: (slave team0): Releasing backup interface [ 278.793870][ T6199] bridge0: port 3(team0) entered blocking state [ 278.801138][ T3636] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 278.805919][ T3166] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 278.816692][ T3636] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 278.825843][ T6199] bridge0: port 3(team0) entered disabled state [ 278.835005][ T6199] device team0 entered promiscuous mode [ 278.840671][ T6199] device team_slave_0 entered promiscuous mode [ 278.847062][ T6199] device team_slave_1 entered promiscuous mode [ 278.854088][ T6210] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 278.863621][ T6210] bond0: (slave team0): Releasing backup interface [ 278.882956][ T6210] bridge0: port 3(team0) entered blocking state [ 278.893200][ T6210] bridge0: port 3(team0) entered disabled state [ 278.900788][ T6210] device team0 entered promiscuous mode [ 278.916886][ T6210] device team_slave_0 entered promiscuous mode [ 278.923787][ T6210] device team_slave_1 entered promiscuous mode [ 279.217524][ T3166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.228595][ T3166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.238826][ T3166] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 279.248262][ T3166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.262634][ T3166] usb 4-1: config 0 descriptor?? [ 279.807425][ T3166] usbhid 4-1:0.0: can't add hid device: -71 [ 279.813456][ T3166] usbhid: probe of 4-1:0.0 failed with error -71 [ 279.823875][ T3166] usb 4-1: USB disconnect, device number 35 23:05:50 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0xa29b, 0x3f, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x54, 0x8}, {0x0, 0x90, 0x3ff, 0xfffe}}, @l2cap_conf_rsp={{0x5, 0x81, 0x18}, {0x5, 0x3f, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x7ff, 0xfffffc5e, 0x200}}]}}]}}, 0x3a) 23:05:50 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0xa29b, 0x3f, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x54, 0x8}, {0x0, 0x90, 0x3ff, 0xfffe}}, @l2cap_conf_rsp={{0x5, 0x81, 0x18}, {0x5, 0x3f, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x7ff, 0xfffffc5e, 0x200}}]}}]}}, 0x3a) 23:05:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:50 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0xf8, 0x80040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000280)=0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000014400eefffffffffffff7000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 23:05:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c00050017e8b29d5500000000000000"], 0x15) 23:05:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x302, 0x0, 0x10, 0x0, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000000)=@usbdevfs_disconnect={0x6}) 23:05:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c00050017e8b29d5500000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c00050017e8b29d5500000000000000"], 0x15) (async) 23:05:50 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c00050017e8b29d5500000000000000"], 0x15) 23:05:50 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x24) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') [ 280.263009][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 280.275327][ T3636] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 280.281575][ T3636] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 280.289328][ T3655] Bluetooth: hci5: ACL packet for unknown connection handle 1 23:05:50 executing program 2: openat$urandom(0xffffff9c, &(0x7f0000000040), 0x101c42, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c000500170008000000000000000800"], 0x15) 23:05:50 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0xa29b, 0x3f, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x54, 0x8}, {0x0, 0x90, 0x3ff, 0xfffe}}, @l2cap_conf_rsp={{0x5, 0x81, 0x18}, {0x5, 0x3f, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x7ff, 0xfffffc5e, 0x200}}]}}]}}, 0x3a) [ 280.352894][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 23:05:50 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0xf8, 0x80040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000280)=0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000014400eefffffffffffff7000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0xf8, 0x80040) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) dup2(r1, r1) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000280)=0xc) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000014400eefffffffffffff7000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) (async) [ 280.444378][ T3636] Bluetooth: hci1: wrong event for mode 0 23:05:50 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x24) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x24) (async) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') (async) 23:05:50 executing program 2: openat$urandom(0xffffff9c, &(0x7f0000000040), 0x101c42, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c000500170008000000000000000800"], 0x15) [ 280.487725][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 280.493811][ T3636] Bluetooth: hci5: ACL packet for unknown connection handle 1 [ 280.525948][ T3636] Bluetooth: hci1: wrong event for mode 0 23:05:50 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0xa29b, 0x3f, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x54, 0x8}, {0x0, 0x90, 0x3ff, 0xfffe}}, @l2cap_conf_rsp={{0x5, 0x81, 0x18}, {0x5, 0x3f, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x7ff, 0xfffffc5e, 0x200}}]}}]}}, 0x3a) [ 280.535080][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 280.549217][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 280.607350][ T4982] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 280.642001][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 280.661172][ T3636] Bluetooth: hci5: ACL packet for unknown connection handle 1 [ 280.967477][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.978830][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.990285][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 280.999507][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.009533][ T4982] usb 4-1: config 0 descriptor?? [ 281.547414][ T4982] usbhid 4-1:0.0: can't add hid device: -71 [ 281.553390][ T4982] usbhid: probe of 4-1:0.0 failed with error -71 [ 281.566087][ T4982] usb 4-1: USB disconnect, device number 36 23:05:52 executing program 2: openat$urandom(0xffffff9c, &(0x7f0000000040), 0x101c42, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c000500170008000000000000000800"], 0x15) 23:05:52 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x24) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x24) (async) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') (async) 23:05:52 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0xf8, 0x80040) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r4 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000280)=0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000014400eefffffffffffff7000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 23:05:52 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) 23:05:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) 23:05:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x302, 0x0, 0x10, 0x0, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000000)=@usbdevfs_disconnect={0x6}) 23:05:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x15) 23:05:52 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803010000"], 0x6) 23:05:52 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) [ 282.018630][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 282.024793][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 282.030828][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 282.042576][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 23:05:52 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803010000"], 0x6) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803010000"], 0x6) (async) [ 282.142987][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 282.172649][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 23:05:52 executing program 0: 23:05:52 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0xf8, 0x80040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000280)=0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000014400eefffffffffffff7000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@bridge_newneigh={0x30, 0x1c, 0x425, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 23:05:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x15) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x15) (async) 23:05:52 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803010000"], 0x6) [ 282.188872][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 282.195927][ T3636] Bluetooth: hci1: wrong event for mode 0 23:05:52 executing program 0: 23:05:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x15) [ 282.348515][ T15] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 282.378887][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 282.408418][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 282.717591][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.728628][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.738469][ T15] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 282.747598][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.757595][ T15] usb 4-1: config 0 descriptor?? [ 283.297388][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 283.303454][ T15] usbhid: probe of 4-1:0.0 failed with error -71 [ 283.312364][ T15] usb 4-1: USB disconnect, device number 37 23:05:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:05:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) lseek(r1, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1aa) 23:05:53 executing program 4: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x3) 23:05:53 executing program 0: 23:05:53 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x6, 0xc8}}}, 0x5) 23:05:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x302, 0x0, 0x10, 0x0, 0x0}) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000000)=@usbdevfs_disconnect={0x6}) 23:05:54 executing program 0: syz_emit_vhci(0x0, 0x0) 23:05:54 executing program 4: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x3) 23:05:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) lseek(r1, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1aa) 23:05:54 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x6, 0xc8}}}, 0x5) 23:05:54 executing program 0: syz_emit_vhci(0x0, 0x0) 23:05:54 executing program 4: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x3) [ 284.087309][ T3166] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 284.457426][ T3166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.468553][ T3166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.479030][ T3166] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 284.488475][ T3166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.500496][ T3166] usb 4-1: config 0 descriptor?? [ 285.067509][ T3166] usbhid 4-1:0.0: can't add hid device: -71 [ 285.073626][ T3166] usbhid: probe of 4-1:0.0 failed with error -71 [ 285.085537][ T3166] usb 4-1: USB disconnect, device number 38 23:05:55 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x6, 0xc8}}}, 0x5) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x6, 0xc8}}}, 0x5) (async) 23:05:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) lseek(r1, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1aa) 23:05:55 executing program 0: syz_emit_vhci(0x0, 0x0) 23:05:55 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x15a}, @l2cap_cid_signaling={{0x156}, [@l2cap_conf_rsp={{0x5, 0xff, 0x20}, {0x1, 0x7f, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x0, 0x20, 0x8c63, 0x800}}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_move_chan_cfm={{0x10, 0x85, 0x4}, {0x4, 0x3}}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x6784, 0xf1}}, @l2cap_conf_rsp={{0x5, 0xf9, 0x1f}, {0x200, 0xfffa, 0x13, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x4, 0x401, 0x3f, 0xe5b}}]}}, @l2cap_disconn_rsp={{0x7, 0x80, 0x4}, {0x8, 0xfffa}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x5, 0x9, 0x1, 0xa20c}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x81, 0x1, 0x4, 0x5}}, @l2cap_info_rsp={{0xb, 0x6, 0xdb}, {0x8, 0x101, "0dd543a181d9ad3643d30261ed43a06c068203cafc53a91bf74636813e53e81877107d214b18d3c64bbb1f07172f37b7983edbcb550843c35fc9412ad5f49c0fd9297f293c91c33e17b34d1ef7701637d2076df82fd25909b3cc6246df6deeb237c69e9cdf03fbacfe8f091637aae75105cc9c5d3ba73297b0f7a8b5d3c358643d184084853dcb085548099187d6036cf090184ed8c611e5f9fdacf775b8fd0040a480e793bb0a49fee60cbc21f3048f7c9234935b856e0cd55755459978abd20c2b10a195bcc39d2f92dacd20534f11c9ffc8f0820d02"}}]}}, 0x15f) 23:05:55 executing program 1: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2883fabf0c4fd916b212e2e8d2f84648b1c1ad8349a55bdfab6e36686d174ee85adbd4f3fa49418933492cce200b59ca8d855ade0f43dfcefad4cd6f99342ffcb2832a5bc3513d2660b6b92af87d92f8d59de407ecbe80bbe0056edbc6208db1ec4a740a153932672c0bfc920dc0a353c72cf8a941417fddb5382dc223e1f67c73ba4e5f9792f0444ac038bfdd1cb3e2462db619c5a20b6398e947117934fdb5141214041225bb0d6b208d5e7fa99339f49f1228599b2254a2bf5c45070ac0869aa0087c47f4b58aef52f380d495f027", 0xd0}, {&(0x7f0000000180)="ed9167307229e89c7b9d015803efccf361c3abc2b7839559e914693301004896ab6a56eb915135a2f8df06e5f0f8", 0x2e}, {&(0x7f0000000240)="841f66b32acdc0c3b5dfcf228e38a03f54e85f9190ed3d6cab923d32f789721987ebf856814c7e74300bb13345d77b3bc612eefb97df887bf967bf9c63494c3317bf61657d411a36f221df63458ef88e19d4f36a9fc5c5d638cf8236c192f8a80447", 0x62}], 0x3, r0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "9a863cfe60df5d692fd5aad51ce658a4b0a89db5176142419d6f39569b3411c23498b0aeba198fdc5d7fb5a0d183463845bcca5f3c1931d09b9f16cdab9dc3d4"}, 0x48, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$unlink(0x11, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "244b9ada784c109d57387e875f72d57568d373acc873e00e51f1ad1635afe1fde2fa3d5ed412b01cdbe93aeff43627999dc194bd647ae49ab588c9b894240cae", 0x3d}, 0x48, r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040c41090ea50000000000109022400010000000009040000010301000009210000000122010009048103e72cc30da8e89e1cf7506327251b48442090befda8bf30018f4443363a0b845367ee698867072d5fc44d68a59dd82dc7a11e7cdefc8f07bde08f"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:05:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:05:55 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}]}}}, 0x22) 23:05:55 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x15a}, @l2cap_cid_signaling={{0x156}, [@l2cap_conf_rsp={{0x5, 0xff, 0x20}, {0x1, 0x7f, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x0, 0x20, 0x8c63, 0x800}}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_move_chan_cfm={{0x10, 0x85, 0x4}, {0x4, 0x3}}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x6784, 0xf1}}, @l2cap_conf_rsp={{0x5, 0xf9, 0x1f}, {0x200, 0xfffa, 0x13, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x4, 0x401, 0x3f, 0xe5b}}]}}, @l2cap_disconn_rsp={{0x7, 0x80, 0x4}, {0x8, 0xfffa}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x5, 0x9, 0x1, 0xa20c}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x81, 0x1, 0x4, 0x5}}, @l2cap_info_rsp={{0xb, 0x6, 0xdb}, {0x8, 0x101, "0dd543a181d9ad3643d30261ed43a06c068203cafc53a91bf74636813e53e81877107d214b18d3c64bbb1f07172f37b7983edbcb550843c35fc9412ad5f49c0fd9297f293c91c33e17b34d1ef7701637d2076df82fd25909b3cc6246df6deeb237c69e9cdf03fbacfe8f091637aae75105cc9c5d3ba73297b0f7a8b5d3c358643d184084853dcb085548099187d6036cf090184ed8c611e5f9fdacf775b8fd0040a480e793bb0a49fee60cbc21f3048f7c9234935b856e0cd55755459978abd20c2b10a195bcc39d2f92dacd20534f11c9ffc8f0820d02"}}]}}, 0x15f) 23:05:55 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x10}}}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xfb}, "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"}}, 0xfe) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9}, "6e1fa60474dc3cf53fa49386b5641a50ead8f46ca24fc6c7945b6854f274a4e2680f11ddf1d1205cbb690643e0765ea7d8112bea337c2494e5afbdbb5a7f398f552e3f449fe64166d962f1694b9bed5e3bf16ba60c4ffbb89f698846954fe7d4444a04a88462b6426e5a07396569ffeab24ff7072fc77c9c6b0eb33177a7d561b77a9296853790856bba686cdb133ca5"}, 0xb) 23:05:55 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = getpid() r1 = getpgid(r0) prlimit64(r1, 0xf, 0x0, &(0x7f0000000000)) r2 = syz_clone(0xc0000080, &(0x7f00000000c0)="ec6bf2d6e72e637f1626f80e81b4f41a8556c04aaef5e81a1e0b129ea788a2af7d7a2c13a4304c9a8eecbfd7f295a0edc5c090e1b4ede5183ae92227e1139f042d4017c1be99b9dc7d6393e243cbdc4693dd547105d6415d81df6a98f41f47a295e0e63c9db667c9cd593075970c96ff53a0b07f67ab", 0x76, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="e285bd68a2531ae167918039943bfccaecea427ea1c8e4ff58c727c0bb865625ceb4b10570e50680d871eafef21e11b31918f619582f59fd5a007e24d6e1645b9d56851992081db142f6b22bb976992fe1535a39a6b791f67aab4ca4ef41d3134ba1153bf5fac0d20235084f642c219dae247dc2e8b3241e890267793c71e4f3bfb93791525d62b17d6a7ecb13884aa34908a8ec20149c6a6d90b7872ecfe65553a7c7f8dfef7e340e64bd45") sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000daf5d8e808001b0000000000"], 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000006c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 23:05:55 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x15a}, @l2cap_cid_signaling={{0x156}, [@l2cap_conf_rsp={{0x5, 0xff, 0x20}, {0x1, 0x7f, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x0, 0x20, 0x8c63, 0x800}}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_move_chan_cfm={{0x10, 0x85, 0x4}, {0x4, 0x3}}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x6784, 0xf1}}, @l2cap_conf_rsp={{0x5, 0xf9, 0x1f}, {0x200, 0xfffa, 0x13, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x4, 0x401, 0x3f, 0xe5b}}]}}, @l2cap_disconn_rsp={{0x7, 0x80, 0x4}, {0x8, 0xfffa}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x5, 0x9, 0x1, 0xa20c}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x81, 0x1, 0x4, 0x5}}, @l2cap_info_rsp={{0xb, 0x6, 0xdb}, {0x8, 0x101, "0dd543a181d9ad3643d30261ed43a06c068203cafc53a91bf74636813e53e81877107d214b18d3c64bbb1f07172f37b7983edbcb550843c35fc9412ad5f49c0fd9297f293c91c33e17b34d1ef7701637d2076df82fd25909b3cc6246df6deeb237c69e9cdf03fbacfe8f091637aae75105cc9c5d3ba73297b0f7a8b5d3c358643d184084853dcb085548099187d6036cf090184ed8c611e5f9fdacf775b8fd0040a480e793bb0a49fee60cbc21f3048f7c9234935b856e0cd55755459978abd20c2b10a195bcc39d2f92dacd20534f11c9ffc8f0820d02"}}]}}, 0x15f) 23:05:55 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}]}}}, 0x22) [ 285.797270][ T3166] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 285.879547][ T3696] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 286.227647][ T3166] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 286.235937][ T3166] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 286.245619][ T3166] usb 2-1: config 0 has no interface number 1 [ 286.252001][ T3166] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.265108][ T3166] usb 2-1: too many endpoints for config 0 interface 129 altsetting 3: 231, using maximum allowed: 30 [ 286.276166][ T3166] usb 2-1: config 0 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 286.289608][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.300562][ T3166] usb 2-1: config 0 interface 129 has no altsetting 0 [ 286.307452][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.317269][ T3166] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.50 [ 286.326331][ T3166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.334502][ T3696] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 286.343623][ T3696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.353535][ T3166] usb 2-1: config 0 descriptor?? [ 286.365098][ T3696] usb 4-1: config 0 descriptor?? [ 286.399963][ T3166] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 286.887507][ T3166] usb 2-1: string descriptor 0 read error: -71 [ 286.903565][ T3166] usb 2-1: USB disconnect, device number 13 [ 286.912046][ T3696] usbhid 4-1:0.0: can't add hid device: -71 [ 286.919451][ T3696] usbhid: probe of 4-1:0.0 failed with error -71 [ 286.952523][ T3696] usb 4-1: USB disconnect, device number 39 23:05:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 23:05:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x10}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xfb}, "a09dbe1b10d7c836de97d5f3384aa74ada60367d2c0ab537e7383f41421614e63bd1ebd175da4a878cffad0587f81aded31eed140dec6bb3df9c3bb7a4c42bd376c9104eb79075510463d31cfb4e665a0560cfeca71faec94e109294b063913eb8972e556449ae65f8851c9734f3db5b8e354044c8b9a5de192d2d74eb66ffb99dec1a2a38a492b4e79e096ccb77ffda3f664152f9af7564b1a810159c27e336a622aa40bbe52baed441528d271fd18fb1d9e85b78c1691bd3c0689c5073ed296fb21afcf481c2f0a1351866353219a596d15fb04004b71016aa9c9bf5f97d3b2d351b212afefdec34eeb88f0a237b710285523118d6b5c4d0d47e"}}, 0xfe) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9}, "6e1fa60474dc3cf53fa49386b5641a50ead8f46ca24fc6c7945b6854f274a4e2680f11ddf1d1205cbb690643e0765ea7d8112bea337c2494e5afbdbb5a7f398f552e3f449fe64166d962f1694b9bed5e3bf16ba60c4ffbb89f698846954fe7d4444a04a88462b6426e5a07396569ffeab24ff7072fc77c9c6b0eb33177a7d561b77a9296853790856bba686cdb133ca5"}, 0xb) 23:05:57 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}]}}}, 0x22) 23:05:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0xfb}, "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"}, 0xff) 23:05:57 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = getpid() r1 = getpgid(r0) prlimit64(r1, 0xf, 0x0, &(0x7f0000000000)) (async) r2 = syz_clone(0xc0000080, &(0x7f00000000c0)="ec6bf2d6e72e637f1626f80e81b4f41a8556c04aaef5e81a1e0b129ea788a2af7d7a2c13a4304c9a8eecbfd7f295a0edc5c090e1b4ede5183ae92227e1139f042d4017c1be99b9dc7d6393e243cbdc4693dd547105d6415d81df6a98f41f47a295e0e63c9db667c9cd593075970c96ff53a0b07f67ab", 0x76, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="e285bd68a2531ae167918039943bfccaecea427ea1c8e4ff58c727c0bb865625ceb4b10570e50680d871eafef21e11b31918f619582f59fd5a007e24d6e1645b9d56851992081db142f6b22bb976992fe1535a39a6b791f67aab4ca4ef41d3134ba1153bf5fac0d20235084f642c219dae247dc2e8b3241e890267793c71e4f3bfb93791525d62b17d6a7ecb13884aa34908a8ec20149c6a6d90b7872ecfe65553a7c7f8dfef7e340e64bd45") sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000daf5d8e808001b0000000000"], 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000006c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 23:05:57 executing program 1: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2883fabf0c4fd916b212e2e8d2f84648b1c1ad8349a55bdfab6e36686d174ee85adbd4f3fa49418933492cce200b59ca8d855ade0f43dfcefad4cd6f99342ffcb2832a5bc3513d2660b6b92af87d92f8d59de407ecbe80bbe0056edbc6208db1ec4a740a153932672c0bfc920dc0a353c72cf8a941417fddb5382dc223e1f67c73ba4e5f9792f0444ac038bfdd1cb3e2462db619c5a20b6398e947117934fdb5141214041225bb0d6b208d5e7fa99339f49f1228599b2254a2bf5c45070ac0869aa0087c47f4b58aef52f380d495f027", 0xd0}, {&(0x7f0000000180)="ed9167307229e89c7b9d015803efccf361c3abc2b7839559e914693301004896ab6a56eb915135a2f8df06e5f0f8", 0x2e}, {&(0x7f0000000240)="841f66b32acdc0c3b5dfcf228e38a03f54e85f9190ed3d6cab923d32f789721987ebf856814c7e74300bb13345d77b3bc612eefb97df887bf967bf9c63494c3317bf61657d411a36f221df63458ef88e19d4f36a9fc5c5d638cf8236c192f8a80447", 0x62}], 0x3, r0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "9a863cfe60df5d692fd5aad51ce658a4b0a89db5176142419d6f39569b3411c23498b0aeba198fdc5d7fb5a0d183463845bcca5f3c1931d09b9f16cdab9dc3d4"}, 0x48, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$unlink(0x11, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "244b9ada784c109d57387e875f72d57568d373acc873e00e51f1ad1635afe1fde2fa3d5ed412b01cdbe93aeff43627999dc194bd647ae49ab588c9b894240cae", 0x3d}, 0x48, r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040c41090ea50000000000109022400010000000009040000010301000009210000000122010009048103e72cc30da8e89e1cf7506327251b48442090befda8bf30018f4443363a0b845367ee698867072d5fc44d68a59dd82dc7a11e7cdefc8f07bde08f"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2883fabf0c4fd916b212e2e8d2f84648b1c1ad8349a55bdfab6e36686d174ee85adbd4f3fa49418933492cce200b59ca8d855ade0f43dfcefad4cd6f99342ffcb2832a5bc3513d2660b6b92af87d92f8d59de407ecbe80bbe0056edbc6208db1ec4a740a153932672c0bfc920dc0a353c72cf8a941417fddb5382dc223e1f67c73ba4e5f9792f0444ac038bfdd1cb3e2462db619c5a20b6398e947117934fdb5141214041225bb0d6b208d5e7fa99339f49f1228599b2254a2bf5c45070ac0869aa0087c47f4b58aef52f380d495f027", 0xd0}, {&(0x7f0000000180)="ed9167307229e89c7b9d015803efccf361c3abc2b7839559e914693301004896ab6a56eb915135a2f8df06e5f0f8", 0x2e}, {&(0x7f0000000240)="841f66b32acdc0c3b5dfcf228e38a03f54e85f9190ed3d6cab923d32f789721987ebf856814c7e74300bb13345d77b3bc612eefb97df887bf967bf9c63494c3317bf61657d411a36f221df63458ef88e19d4f36a9fc5c5d638cf8236c192f8a80447", 0x62}], 0x3, r0) (async) add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "9a863cfe60df5d692fd5aad51ce658a4b0a89db5176142419d6f39569b3411c23498b0aeba198fdc5d7fb5a0d183463845bcca5f3c1931d09b9f16cdab9dc3d4"}, 0x48, r1) (async) keyctl$setperm(0x5, r2, 0x0) (async) keyctl$unlink(0x11, r2, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "244b9ada784c109d57387e875f72d57568d373acc873e00e51f1ad1635afe1fde2fa3d5ed412b01cdbe93aeff43627999dc194bd647ae49ab588c9b894240cae", 0x3d}, 0x48, r2) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040c41090ea50000000000109022400010000000009040000010301000009210000000122010009048103e72cc30da8e89e1cf7506327251b48442090befda8bf30018f4443363a0b845367ee698867072d5fc44d68a59dd82dc7a11e7cdefc8f07bde08f"], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 23:05:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0xfb}, "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"}, 0xff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0xfb}, "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"}, 0xff) (async) [ 287.374307][ T3655] Bluetooth: hci1: wrong event for mode 0 23:05:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x10}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xfb}, "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"}}, 0xfe) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9}, "6e1fa60474dc3cf53fa49386b5641a50ead8f46ca24fc6c7945b6854f274a4e2680f11ddf1d1205cbb690643e0765ea7d8112bea337c2494e5afbdbb5a7f398f552e3f449fe64166d962f1694b9bed5e3bf16ba60c4ffbb89f698846954fe7d4444a04a88462b6426e5a07396569ffeab24ff7072fc77c9c6b0eb33177a7d561b77a9296853790856bba686cdb133ca5"}, 0xb) 23:05:57 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed, 0xc6, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) 23:05:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x3}, @l2cap_cid_le_signaling={{}, @l2cap_le_conn_req={{0x14, 0x1}, {0x1, 0x9, 0xf000, 0x9, 0x4}}}}, 0xbe) [ 287.380268][ T3655] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 287.533554][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 287.548229][ T3636] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 287.549065][ T3636] Bluetooth: hci1: wrong event for mode 0 23:05:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0xfb}, "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"}, 0xff) 23:05:57 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed, 0x0, 0xfd, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) [ 287.563213][ T3636] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 287.583967][ T3636] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 287.609152][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 287.708067][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 287.733958][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 287.740229][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 287.746196][ T3655] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 287.777279][ T3696] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 288.077537][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.088914][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.099383][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 288.108800][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.121324][ T23] usb 4-1: config 0 descriptor?? [ 288.177610][ T3696] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 288.185830][ T3696] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 288.196234][ T3696] usb 2-1: config 0 has no interface number 1 [ 288.202738][ T3696] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.215950][ T3696] usb 2-1: too many endpoints for config 0 interface 129 altsetting 3: 231, using maximum allowed: 30 [ 288.227346][ T3696] usb 2-1: config 0 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 288.241232][ T3696] usb 2-1: config 0 interface 129 has no altsetting 0 [ 288.248668][ T3696] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.50 [ 288.258100][ T3696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.266645][ T3166] Bluetooth: hci2: command 0x0406 tx timeout [ 288.274415][ T3696] usb 2-1: config 0 descriptor?? [ 288.279698][ T3166] Bluetooth: hci5: command 0x0406 tx timeout [ 288.285793][ T3166] Bluetooth: hci1: command 0x0406 tx timeout [ 288.292350][ T3166] Bluetooth: hci0: command 0x0406 tx timeout [ 288.299118][ T3166] Bluetooth: hci4: command 0x0406 tx timeout [ 288.319645][ T3696] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 288.687516][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 288.693541][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 288.711595][ T23] usb 4-1: USB disconnect, device number 40 [ 288.847362][ T3696] usb 2-1: string descriptor 0 read error: -71 [ 288.858989][ T3696] usb 2-1: USB disconnect, device number 14 23:05:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:05:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x3}, @l2cap_cid_le_signaling={{}, @l2cap_le_conn_req={{0x14, 0x1}, {0x1, 0x9, 0xf000, 0x9, 0x4}}}}, 0xbe) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x3}, @l2cap_cid_le_signaling={{}, @l2cap_le_conn_req={{0x14, 0x1}, {0x1, 0x9, 0xf000, 0x9, 0x4}}}}, 0xbe) (async) 23:05:59 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = getpid() r1 = getpgid(r0) prlimit64(r1, 0xf, 0x0, &(0x7f0000000000)) r2 = syz_clone(0xc0000080, &(0x7f00000000c0)="ec6bf2d6e72e637f1626f80e81b4f41a8556c04aaef5e81a1e0b129ea788a2af7d7a2c13a4304c9a8eecbfd7f295a0edc5c090e1b4ede5183ae92227e1139f042d4017c1be99b9dc7d6393e243cbdc4693dd547105d6415d81df6a98f41f47a295e0e63c9db667c9cd593075970c96ff53a0b07f67ab", 0x76, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="e285bd68a2531ae167918039943bfccaecea427ea1c8e4ff58c727c0bb865625ceb4b10570e50680d871eafef21e11b31918f619582f59fd5a007e24d6e1645b9d56851992081db142f6b22bb976992fe1535a39a6b791f67aab4ca4ef41d3134ba1153bf5fac0d20235084f642c219dae247dc2e8b3241e890267793c71e4f3bfb93791525d62b17d6a7ecb13884aa34908a8ec20149c6a6d90b7872ecfe65553a7c7f8dfef7e340e64bd45") sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000daf5d8e808001b0000000000"], 0x28}}, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000006c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) (async) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 23:05:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ec47030000006e0f3675805c7d1e2e7b75a3b703c769d8853227b9c59005460002a640ffc83dee78128f43b1a0aabb50f11504b869dd438889faeba1b1f2369d18be6bd24177564df7f0473eca325ce80bf368de19dc0b3510e8fe7a48e1e8"], 0x6) 23:05:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed, 0x0, 0x0, 0xb8, "0f110f", 0x0, 0x6}]}}}, 0x7e) 23:05:59 executing program 1: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2883fabf0c4fd916b212e2e8d2f84648b1c1ad8349a55bdfab6e36686d174ee85adbd4f3fa49418933492cce200b59ca8d855ade0f43dfcefad4cd6f99342ffcb2832a5bc3513d2660b6b92af87d92f8d59de407ecbe80bbe0056edbc6208db1ec4a740a153932672c0bfc920dc0a353c72cf8a941417fddb5382dc223e1f67c73ba4e5f9792f0444ac038bfdd1cb3e2462db619c5a20b6398e947117934fdb5141214041225bb0d6b208d5e7fa99339f49f1228599b2254a2bf5c45070ac0869aa0087c47f4b58aef52f380d495f027", 0xd0}, {&(0x7f0000000180)="ed9167307229e89c7b9d015803efccf361c3abc2b7839559e914693301004896ab6a56eb915135a2f8df06e5f0f8", 0x2e}, {&(0x7f0000000240)="841f66b32acdc0c3b5dfcf228e38a03f54e85f9190ed3d6cab923d32f789721987ebf856814c7e74300bb13345d77b3bc612eefb97df887bf967bf9c63494c3317bf61657d411a36f221df63458ef88e19d4f36a9fc5c5d638cf8236c192f8a80447", 0x62}], 0x3, r0) (async, rerun: 64) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (rerun: 64) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "9a863cfe60df5d692fd5aad51ce658a4b0a89db5176142419d6f39569b3411c23498b0aeba198fdc5d7fb5a0d183463845bcca5f3c1931d09b9f16cdab9dc3d4"}, 0x48, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$unlink(0x11, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "244b9ada784c109d57387e875f72d57568d373acc873e00e51f1ad1635afe1fde2fa3d5ed412b01cdbe93aeff43627999dc194bd647ae49ab588c9b894240cae", 0x3d}, 0x48, r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040c41090ea50000000000109022400010000000009040000010301000009210000000122010009048103e72cc30da8e89e1cf7506327251b48442090befda8bf30018f4443363a0b845367ee698867072d5fc44d68a59dd82dc7a11e7cdefc8f07bde08f"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:05:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ec47030000006e0f3675805c7d1e2e7b75a3b703c769d8853227b9c59005460002a640ffc83dee78128f43b1a0aabb50f11504b869dd438889faeba1b1f2369d18be6bd24177564df7f0473eca325ce80bf368de19dc0b3510e8fe7a48e1e8"], 0x6) 23:05:59 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f", 0x0, 0x6}]}}}, 0x7e) [ 289.123133][ T3636] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 289.130776][ T3636] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 289.145493][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 23:05:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x3}, @l2cap_cid_le_signaling={{}, @l2cap_le_conn_req={{0x14, 0x1}, {0x1, 0x9, 0xf000, 0x9, 0x4}}}}, 0xbe) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x3}, @l2cap_cid_le_signaling={{}, @l2cap_le_conn_req={{0x14, 0x1}, {0x1, 0x9, 0xf000, 0x9, 0x4}}}}, 0xbe) (async) 23:05:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ec47030000006e0f3675805c7d1e2e7b75a3b703c769d8853227b9c59005460002a640ffc83dee78128f43b1a0aabb50f11504b869dd438889faeba1b1f2369d18be6bd24177564df7f0473eca325ce80bf368de19dc0b3510e8fe7a48e1e8"], 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ec47030000006e0f3675805c7d1e2e7b75a3b703c769d8853227b9c59005460002a640ffc83dee78128f43b1a0aabb50f11504b869dd438889faeba1b1f2369d18be6bd24177564df7f0473eca325ce80bf368de19dc0b3510e8fe7a48e1e8"], 0x6) (async) 23:05:59 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x0, 0x1, [{0xc8, 0x5, 0x9}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) [ 289.292887][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 289.351768][ T3636] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 289.360710][ T3636] Bluetooth: hci3: ACL packet for unknown connection handle 1 23:05:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r3, 0x2f, "3cdb6a4379670cd0c8c363824bda6ed9986977421965cdee0dfd6db7c2c79eb7841ab27d40599a2186e2872ab7bf9b"}, &(0x7f0000000100)=0x37) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0], 0x4) [ 289.396364][ T3636] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 289.396396][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 289.471064][ T7] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 289.495704][ T4982] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 289.837430][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.857273][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.867048][ T7] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 289.887471][ T4982] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 289.895675][ T4982] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 289.904807][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.912906][ T4982] usb 2-1: config 0 has no interface number 1 [ 289.928607][ T7] usb 4-1: config 0 descriptor?? [ 289.933699][ T4982] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.946875][ T4982] usb 2-1: too many endpoints for config 0 interface 129 altsetting 3: 231, using maximum allowed: 30 [ 289.958266][ T4982] usb 2-1: config 0 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 289.983965][ T4982] usb 2-1: config 0 interface 129 has no altsetting 0 [ 289.998853][ T4982] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.50 [ 290.013186][ T4982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.038662][ T4982] usb 2-1: config 0 descriptor?? [ 290.089889][ T4982] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 290.477426][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 290.483421][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 290.501830][ T7] usb 4-1: USB disconnect, device number 41 [ 290.557399][ T4982] usb 2-1: string descriptor 0 read error: -71 [ 290.572992][ T4982] usb 2-1: USB disconnect, device number 15 23:06:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:06:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:01 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x6, 0x8, 0x81, "bef172", 0x401, 0x1}]}}}, 0x22) 23:06:01 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x0, 0x1, [{0xc8, 0x5, 0x9}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 23:06:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r3, 0x2f, "3cdb6a4379670cd0c8c363824bda6ed9986977421965cdee0dfd6db7c2c79eb7841ab27d40599a2186e2872ab7bf9b"}, &(0x7f0000000100)=0x37) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0], 0x4) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) dup2(r1, r1) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r3, 0x2f, "3cdb6a4379670cd0c8c363824bda6ed9986977421965cdee0dfd6db7c2c79eb7841ab27d40599a2186e2872ab7bf9b"}, &(0x7f0000000100)=0x37) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0], 0x4) (async) [ 290.923413][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 290.941682][ T3636] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 290.941714][ T3636] Bluetooth: hci1: wrong event for mode 0 23:06:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x6, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f4714847982826479deb896804c1764a50653aa4227419434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b00"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) 23:06:01 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x10}}}}, 0x15) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xfb}, "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"}}, 0xfe) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9}, "6e1fa60474dc3cf53fa49386b5641a50ead8f46ca24fc6c7945b6854f274a4e2680f11ddf1d1205cbb690643e0765ea7d8112bea337c2494e5afbdbb5a7f398f552e3f449fe64166d962f1694b9bed5e3bf16ba60c4ffbb89f698846954fe7d4444a04a88462b6426e5a07396569ffeab24ff7072fc77c9c6b0eb33177a7d561b77a9296853790856bba686cdb133ca5"}, 0xb) 23:06:01 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x0, 0x1, [{0xc8, 0x5, 0x9}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x0, 0x1, [{0xc8, 0x5, 0x9}]}}}, 0xc) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) 23:06:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x22) 23:06:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r3, 0x2f, "3cdb6a4379670cd0c8c363824bda6ed9986977421965cdee0dfd6db7c2c79eb7841ab27d40599a2186e2872ab7bf9b"}, &(0x7f0000000100)=0x37) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0], 0x4) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) dup2(r1, r1) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x71, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x14) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r3, 0x2f, "3cdb6a4379670cd0c8c363824bda6ed9986977421965cdee0dfd6db7c2c79eb7841ab27d40599a2186e2872ab7bf9b"}, &(0x7f0000000100)=0x37) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0], 0x4) (async) 23:06:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x22) 23:06:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x22) [ 291.136913][ T3636] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 291.136944][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 291.161168][ T3636] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 291.161200][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 291.357343][ T3724] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 291.757506][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.768585][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.778511][ T3724] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 291.787945][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.811785][ T3724] usb 4-1: config 0 descriptor?? [ 292.407613][ T3724] usbhid 4-1:0.0: can't add hid device: -71 [ 292.413774][ T3724] usbhid: probe of 4-1:0.0 failed with error -71 [ 292.422113][ T3724] usb 4-1: USB disconnect, device number 42 23:06:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 23:06:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x6, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f4714847982826479deb896804c1764a50653aa4227419434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b00"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) 23:06:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x48e6, 0x0, 0x0, 0x0, 0x1, "00f300000000000400f3ffffffffffffff0400"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5412, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') 23:06:03 executing program 4: getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x57, 0x10, 0x1, 0x3}, &(0x7f0000000080)=0x18) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:03 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x8, 0x81, "bef172", 0x401, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0xfc, 0x18}, {0x8, 0x7, [0x1, 0x3, 0x1, 0xe, 0xfff, 0x7, 0x6, 0x1, 0x3, 0x94]}}}}, 0x25) 23:06:03 executing program 4: getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x57, 0x10, 0x1, 0x3}, &(0x7f0000000080)=0x18) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (rerun: 32) 23:06:03 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0xfc, 0x18}, {0x8, 0x7, [0x1, 0x3, 0x1, 0xe, 0xfff, 0x7, 0x6, 0x1, 0x3, 0x94]}}}}, 0x25) 23:06:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x48e6, 0x0, 0x0, 0x0, 0x1, "00f300000000000400f3ffffffffffffff0400"}) (async) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5412, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') (rerun: 32) [ 292.830503][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 292.836636][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:03 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x81, "bef172", 0x401, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:03 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172", 0x401, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) [ 292.927492][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 292.950503][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 292.956436][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 292.963728][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 292.969813][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 292.975708][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 292.983825][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 292.990695][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 292.996574][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.002711][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.008636][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.014514][ T3636] Bluetooth: hci1: wrong event for mode 0 23:06:03 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172", 0x0, 0x1}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) [ 293.023116][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 293.046951][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.052892][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.058974][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.064790][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.071277][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.077065][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.083804][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.091243][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.097012][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.103533][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.109582][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.115369][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.121205][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.127567][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.133318][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.139107][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.144850][ T23] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 293.152999][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.159020][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.164773][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.170556][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.176595][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.182385][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 293.214759][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 293.547578][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.558545][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.568718][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 293.578256][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.589305][ T23] usb 4-1: config 0 descriptor?? [ 294.117387][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 294.123415][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 294.132439][ T23] usb 4-1: USB disconnect, device number 43 23:06:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) 23:06:04 executing program 4: getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x57, 0x10, 0x1, 0x3}, &(0x7f0000000080)=0x18) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x48e6, 0x0, 0x0, 0x0, 0x1, "00f300000000000400f3ffffffffffffff0400"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5412, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x48e6, 0x0, 0x0, 0x0, 0x1, "00f300000000000400f3ffffffffffffff0400"}) (async) syz_open_pts(r0, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5412, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') (async) 23:06:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x6, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f4714847982826479deb896804c1764a50653aa4227419434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b00"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x6, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f4714847982826479deb896804c1764a50653aa4227419434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b00"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) 23:06:04 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:04 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0xfc, 0x18}, {0x8, 0x7, [0x1, 0x3, 0x1, 0xe, 0xfff, 0x7, 0x6, 0x1, 0x3, 0x94]}}}}, 0x25) 23:06:04 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c0005001700080000df000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x2a}, @l2cap_cid_signaling={{0x26}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x6}}, @l2cap_move_chan_rsp={{0xf, 0xb1, 0x4}, {0x20, 0x40}}, @l2cap_conf_req={{0x4, 0x3, 0xc}, {0x1c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x401}, @l2cap_conf_flushto={0x2, 0x2, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x1, 0x4}, {0x4, 0x2}}]}}, 0x2f) 23:06:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x75}, "addc876c5bd2f349edfb84533d3bd8520bfb48afead2836fb1edf26405efb98403b90587c56c38443f81c892d2b4c99beb1932fda7fbfd9727f22ccea8f760fe18174f7fd4e0998182d7dff1bcee8d673ee76a9047380d4d2bcfd1d7e8e80c658ec7cdffffffffffffff7febefc39596b9db192514"}, 0x79) 23:06:04 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x22) [ 294.585326][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 294.591734][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:04 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x22) [ 294.671838][ T3636] Bluetooth: hci1: wrong event for mode 0 23:06:04 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x6, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f4714847982826479deb896804c1764a50653aa4227419434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b00"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) 23:06:04 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x22) [ 294.987623][ T7] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 295.378548][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.389668][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.399526][ T7] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 295.408860][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.426420][ T7] usb 4-1: config 0 descriptor?? [ 296.177372][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 296.183352][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 296.196651][ T7] usb 4-1: USB disconnect, device number 44 23:06:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) 23:06:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x75}, "addc876c5bd2f349edfb84533d3bd8520bfb48afead2836fb1edf26405efb98403b90587c56c38443f81c892d2b4c99beb1932fda7fbfd9727f22ccea8f760fe18174f7fd4e0998182d7dff1bcee8d673ee76a9047380d4d2bcfd1d7e8e80c658ec7cdffffffffffffff7febefc39596b9db192514"}, 0x79) 23:06:06 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:06 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c0005001700080000df000000000000"], 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x2a}, @l2cap_cid_signaling={{0x26}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x6}}, @l2cap_move_chan_rsp={{0xf, 0xb1, 0x4}, {0x20, 0x40}}, @l2cap_conf_req={{0x4, 0x3, 0xc}, {0x1c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x401}, @l2cap_conf_flushto={0x2, 0x2, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x1, 0x4}, {0x4, 0x2}}]}}, 0x2f) 23:06:06 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x1c2, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x401, 0x5, 0x20, 0x100, 0x3}, @mdlm_detail={0x7b, 0x24, 0x13, 0x6, "c8adc6399a1a23af6306c83b8bb30d9953b95cc8f4d1d934ca5477a7faa3605587e19b178e81b4e641f12bd0067c3e6656f2a6f3f1c18f6559a93d67c759ff61f89040a4cfbcd0c0fdc84aced8d59a365aad02618a4e411d41f853085c04627cae640ac25928070809c0ee28d49f4bc54deeb7a3e3164c"}, @mdlm_detail={0xcd, 0x24, 0x13, 0x0, "88ff862c5d283fe5b974e14e021fefeb9f5b70431e9f2c59e74647111792f1f70a9a6ad2c713eddf938aa7d120cf85a63f44b9b73ed808f56e26a2ec295e8930d1eed5831db4d621a9b7dca25a58602b61ec9b9e4efb35e8b714f809645ba3b42669eaf5d7052ca3fc521a1389651d854b4c71f45a09d01a26205cd052e37107fa9b6503621e662a1e0c51f6d5701689d2f330ae551df329f68cf292ba9ee5a93813d4306776fce397f1afafb0ec2153d11f8774bd96ae65122d478ac5b96705f647b81d334a1a037e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}}}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 23:06:06 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x6, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f4714847982826479deb896804c1764a50653aa4227419434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b00"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) 23:06:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x75}, "addc876c5bd2f349edfb84533d3bd8520bfb48afead2836fb1edf26405efb98403b90587c56c38443f81c892d2b4c99beb1932fda7fbfd9727f22ccea8f760fe18174f7fd4e0998182d7dff1bcee8d673ee76a9047380d4d2bcfd1d7e8e80c658ec7cdffffffffffffff7febefc39596b9db192514"}, 0x79) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x75}, "addc876c5bd2f349edfb84533d3bd8520bfb48afead2836fb1edf26405efb98403b90587c56c38443f81c892d2b4c99beb1932fda7fbfd9727f22ccea8f760fe18174f7fd4e0998182d7dff1bcee8d673ee76a9047380d4d2bcfd1d7e8e80c658ec7cdffffffffffffff7febefc39596b9db192514"}, 0x79) (async) 23:06:06 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c98010000c0005001700080000df000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x2a}, @l2cap_cid_signaling={{0x26}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x6}}, @l2cap_move_chan_rsp={{0xf, 0xb1, 0x4}, {0x20, 0x40}}, @l2cap_conf_req={{0x4, 0x3, 0xc}, {0x1c, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x401}, @l2cap_conf_flushto={0x2, 0x2, 0x1}]}}, @l2cap_info_rsp={{0xb, 0x1, 0x4}, {0x4, 0x2}}]}}, 0x2f) [ 296.646759][ T3636] Bluetooth: hci1: wrong event for mode 0 [ 296.662058][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:06 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x200880) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:06 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0xfffffffffffffcdb) [ 296.780636][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 296.790541][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 296.799647][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:07 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) [ 296.916463][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 296.917405][ T15] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 296.977336][ T143] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 297.308088][ T15] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.354181][ T15] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 297.382567][ T15] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.397653][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.408863][ T15] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 297.444950][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.471770][ T143] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 297.505000][ T143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.537440][ T143] usb 4-1: config 0 descriptor?? [ 297.577699][ T15] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.611967][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.660132][ T15] usb 2-1: Product: syz [ 297.670659][ T15] usb 2-1: Manufacturer: syz [ 297.681694][ T15] usb 2-1: SerialNumber: syz [ 297.707789][ T6564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.728627][ T15] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 297.735526][ T15] cdc_ncm 2-1:1.0: bind() failure [ 297.743170][ T15] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 297.750329][ T15] cdc_ncm 2-1:1.1: bind() failure [ 297.932832][ T15] usb 2-1: USB disconnect, device number 16 [ 298.277461][ T143] usbhid 4-1:0.0: can't add hid device: -71 [ 298.283457][ T143] usbhid: probe of 4-1:0.0 failed with error -71 [ 298.292533][ T143] usb 4-1: USB disconnect, device number 45 23:06:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) 23:06:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0xfffffffffffffcdb) 23:06:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x200880) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x200880) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000200)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) 23:06:08 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x0, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x6, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f4714847982826479deb896804c1764a50653aa4227419434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b00"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) 23:06:08 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x1c2, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x401, 0x5, 0x20, 0x100, 0x3}, @mdlm_detail={0x7b, 0x24, 0x13, 0x6, "c8adc6399a1a23af6306c83b8bb30d9953b95cc8f4d1d934ca5477a7faa3605587e19b178e81b4e641f12bd0067c3e6656f2a6f3f1c18f6559a93d67c759ff61f89040a4cfbcd0c0fdc84aced8d59a365aad02618a4e411d41f853085c04627cae640ac25928070809c0ee28d49f4bc54deeb7a3e3164c"}, @mdlm_detail={0xcd, 0x24, 0x13, 0x0, "88ff862c5d283fe5b974e14e021fefeb9f5b70431e9f2c59e74647111792f1f70a9a6ad2c713eddf938aa7d120cf85a63f44b9b73ed808f56e26a2ec295e8930d1eed5831db4d621a9b7dca25a58602b61ec9b9e4efb35e8b714f809645ba3b42669eaf5d7052ca3fc521a1389651d854b4c71f45a09d01a26205cd052e37107fa9b6503621e662a1e0c51f6d5701689d2f330ae551df329f68cf292ba9ee5a93813d4306776fce397f1afafb0ec2153d11f8774bd96ae65122d478ac5b96705f647b81d334a1a037e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}}}}]}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 23:06:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0xfffffffffffffcdb) [ 298.757719][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:09 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x0, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x5}, 0x13) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="3ae7b0f0ef9d2dc643139117b0615bb6c39be7ed79af09456812b02b69323a2b40c02b1136ba83356005b96052aeca7875ceea6bab6268890e02205cb3d53943544689d2c7504cd42c8d32d847de738a8a092a40462b735da41d83a7419ce8fb39ec9bad842972cd4523ec8b386ad3218af28f9df7b521106c0140ce08d99ff51ad3b9988b00ac9a17cfd67829bc08b25b101c241e3df3523a20cb5faf85bef8c439c84e96b153c8f7d45fbdeee1c2f0777e8a3e5c8d447f89f99b40ad5d1829f9da7682ac453661f4fd132e7759fe1bf276daf99cffdc33db26f3b115ea396f4134c9f3b6161338e0a4b3c8f0ef", 0xee, 0x10, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8605a0056000100102004000800070010040400060f4a00060404000200ca0010ff040001047f0005000e008000fbff07000202f10f020201010bfe0d00150200001fbbac7f22ab3ce6e804400f00df0a5a0c04090303080800bfcf0400bf1dbcfb87073ccc982f03ab26ad8d0bfa08428c5563d14df881c4d19747670e781cf810f009d9ab5c016415fc65b041e1f16c18d21d947c8b26924324b31f6ef517b7d585aa0cba9849fccd7d58b586a6007fd93d1dfc4dc9c84ae86fc668631f8130e9c53b583574aaae82f3018bdc17677c04ce22525d3f7a47"], 0x5f) 23:06:09 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x200880) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x200880) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000200)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) 23:06:09 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x0, 0x6, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x5}, 0x13) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async, rerun: 32) sendto$inet6(r1, &(0x7f00000001c0)="3ae7b0f0ef9d2dc643139117b0615bb6c39be7ed79af09456812b02b69323a2b40c02b1136ba83356005b96052aeca7875ceea6bab6268890e02205cb3d53943544689d2c7504cd42c8d32d847de738a8a092a40462b735da41d83a7419ce8fb39ec9bad842972cd4523ec8b386ad3218af28f9df7b521106c0140ce08d99ff51ad3b9988b00ac9a17cfd67829bc08b25b101c241e3df3523a20cb5faf85bef8c439c84e96b153c8f7d45fbdeee1c2f0777e8a3e5c8d447f89f99b40ad5d1829f9da7682ac453661f4fd132e7759fe1bf276daf99cffdc33db26f3b115ea396f4134c9f3b6161338e0a4b3c8f0ef", 0xee, 0x10, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) (async, rerun: 32) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8605a0056000100102004000800070010040400060f4a00060404000200ca0010ff040001047f0005000e008000fbff07000202f10f020201010bfe0d00150200001fbbac7f22ab3ce6e804400f00df0a5a0c04090303080800bfcf0400bf1dbcfb87073ccc982f03ab26ad8d0bfa08428c5563d14df881c4d19747670e781cf810f009d9ab5c016415fc65b041e1f16c18d21d947c8b26924324b31f6ef517b7d585aa0cba9849fccd7d58b586a6007fd93d1dfc4dc9c84ae86fc668631f8130e9c53b583574aaae82f3018bdc17677c04ce22525d3f7a47"], 0x5f) [ 298.940142][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 299.047475][ T143] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 299.057366][ T4982] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 299.076607][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 299.427392][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.444858][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.455274][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 299.457366][ T143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.472592][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.483449][ T143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 299.494393][ T143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.504196][ T143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 299.525770][ T4982] usb 4-1: config 0 descriptor?? [ 299.717591][ T143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.726668][ T143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.734912][ T143] usb 2-1: Product: syz [ 299.743474][ T143] usb 2-1: Manufacturer: syz [ 299.748195][ T143] usb 2-1: SerialNumber: syz [ 299.777694][ T6595] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.808486][ T143] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 299.815328][ T143] cdc_ncm 2-1:1.0: bind() failure [ 299.822971][ T143] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 299.830133][ T143] cdc_ncm 2-1:1.1: bind() failure [ 300.012867][ T7] usb 2-1: USB disconnect, device number 17 [ 300.267398][ T4982] usbhid 4-1:0.0: can't add hid device: -71 [ 300.273393][ T4982] usbhid: probe of 4-1:0.0 failed with error -71 [ 300.286240][ T4982] usb 4-1: USB disconnect, device number 46 23:06:10 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc", 0x6e, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:10 executing program 2: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="ffc88010000c00ebaf28e74f2e76425888ece40500170008000000000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x93}, "101aaf09d79d82f91351facaa209b2f02862b70caa042fbb449c519a570f55d277a034e134896f7c727acc755353bdddc5a002cc9e8f3215ae173f3a22ff244aaa38fd488b1fb395324b718537cde02e7ff3da7fac8a158dc792a8c48c11b792aa48b959c1ba6c076c132ae4762dc87d3acf62c98ba535bb88e6f601103bac454c6795c2043622257c88d3b8c8373fb9dfc33d"}, 0x97) 23:06:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x5}, 0x13) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="3ae7b0f0ef9d2dc643139117b0615bb6c39be7ed79af09456812b02b69323a2b40c02b1136ba83356005b96052aeca7875ceea6bab6268890e02205cb3d53943544689d2c7504cd42c8d32d847de738a8a092a40462b735da41d83a7419ce8fb39ec9bad842972cd4523ec8b386ad3218af28f9df7b521106c0140ce08d99ff51ad3b9988b00ac9a17cfd67829bc08b25b101c241e3df3523a20cb5faf85bef8c439c84e96b153c8f7d45fbdeee1c2f0777e8a3e5c8d447f89f99b40ad5d1829f9da7682ac453661f4fd132e7759fe1bf276daf99cffdc33db26f3b115ea396f4134c9f3b6161338e0a4b3c8f0ef", 0xee, 0x10, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8605a0056000100102004000800070010040400060f4a00060404000200ca0010ff040001047f0005000e008000fbff07000202f10f020201010bfe0d00150200001fbbac7f22ab3ce6e804400f00df0a5a0c04090303080800bfcf0400bf1dbcfb87073ccc982f03ab26ad8d0bfa08428c5563d14df881c4d19747670e781cf810f009d9ab5c016415fc65b041e1f16c18d21d947c8b26924324b31f6ef517b7d585aa0cba9849fccd7d58b586a6007fd93d1dfc4dc9c84ae86fc668631f8130e9c53b583574aaae82f3018bdc17677c04ce22525d3f7a47"], 0x5f) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x5}, 0x13) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f00000001c0)="3ae7b0f0ef9d2dc643139117b0615bb6c39be7ed79af09456812b02b69323a2b40c02b1136ba83356005b96052aeca7875ceea6bab6268890e02205cb3d53943544689d2c7504cd42c8d32d847de738a8a092a40462b735da41d83a7419ce8fb39ec9bad842972cd4523ec8b386ad3218af28f9df7b521106c0140ce08d99ff51ad3b9988b00ac9a17cfd67829bc08b25b101c241e3df3523a20cb5faf85bef8c439c84e96b153c8f7d45fbdeee1c2f0777e8a3e5c8d447f89f99b40ad5d1829f9da7682ac453661f4fd132e7759fe1bf276daf99cffdc33db26f3b115ea396f4134c9f3b6161338e0a4b3c8f0ef", 0xee, 0x10, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8605a0056000100102004000800070010040400060f4a00060404000200ca0010ff040001047f0005000e008000fbff07000202f10f020201010bfe0d00150200001fbbac7f22ab3ce6e804400f00df0a5a0c04090303080800bfcf0400bf1dbcfb87073ccc982f03ab26ad8d0bfa08428c5563d14df881c4d19747670e781cf810f009d9ab5c016415fc65b041e1f16c18d21d947c8b26924324b31f6ef517b7d585aa0cba9849fccd7d58b586a6007fd93d1dfc4dc9c84ae86fc668631f8130e9c53b583574aaae82f3018bdc17677c04ce22525d3f7a47"], 0x5f) (async) 23:06:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000700)=""/177, &(0x7f0000000080)=0xb1) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'pimreg1\x00', {0x2, 0x0, @empty}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4d9b77a6af2d8aa126bd7000fedbdf25ff101401fc03000000220000080002e21f32d30f6c000a010001"], 0x24}, 0x1, 0x0, 0x0, 0x28049085}, 0x20000805) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x20a002, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r4, 0x8004500b, 0x0) syz_clone(0x40000000, &(0x7f0000000400)='x', 0x1, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="bf4f88caf2b4e37c827c313f9c0c5a5d9c9a03fc4d1573233be8988997d28984d93dec5b479d6086") sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000640)="623eb417756c124546d23dd4589f1c1ebc7658a4f33b4923bcd7b3cc6846f415c0305f29d3a77a19d6afe67bfd3b8026e6166d6f84e328f594a6ac6cde868b6a332e538d980f89406c5b10d6df0690ae7ac75fe76dba722f3a086d9d27bdcdc5537de2291e156616f59d916cc1945260bd6b4ef36e841f6207d426cfed66a53ca3788ec9cb35799a63", 0x89) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xf}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x220041, 0x0) 23:06:10 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x1c2, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x401, 0x5, 0x20, 0x100, 0x3}, @mdlm_detail={0x7b, 0x24, 0x13, 0x6, "c8adc6399a1a23af6306c83b8bb30d9953b95cc8f4d1d934ca5477a7faa3605587e19b178e81b4e641f12bd0067c3e6656f2a6f3f1c18f6559a93d67c759ff61f89040a4cfbcd0c0fdc84aced8d59a365aad02618a4e411d41f853085c04627cae640ac25928070809c0ee28d49f4bc54deeb7a3e3164c"}, @mdlm_detail={0xcd, 0x24, 0x13, 0x0, "88ff862c5d283fe5b974e14e021fefeb9f5b70431e9f2c59e74647111792f1f70a9a6ad2c713eddf938aa7d120cf85a63f44b9b73ed808f56e26a2ec295e8930d1eed5831db4d621a9b7dca25a58602b61ec9b9e4efb35e8b714f809645ba3b42669eaf5d7052ca3fc521a1389651d854b4c71f45a09d01a26205cd052e37107fa9b6503621e662a1e0c51f6d5701689d2f330ae551df329f68cf292ba9ee5a93813d4306776fce397f1afafb0ec2153d11f8774bd96ae65122d478ac5b96705f647b81d334a1a037e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}}}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x1c2, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x401, 0x5, 0x20, 0x100, 0x3}, @mdlm_detail={0x7b, 0x24, 0x13, 0x6, "c8adc6399a1a23af6306c83b8bb30d9953b95cc8f4d1d934ca5477a7faa3605587e19b178e81b4e641f12bd0067c3e6656f2a6f3f1c18f6559a93d67c759ff61f89040a4cfbcd0c0fdc84aced8d59a365aad02618a4e411d41f853085c04627cae640ac25928070809c0ee28d49f4bc54deeb7a3e3164c"}, @mdlm_detail={0xcd, 0x24, 0x13, 0x0, "88ff862c5d283fe5b974e14e021fefeb9f5b70431e9f2c59e74647111792f1f70a9a6ad2c713eddf938aa7d120cf85a63f44b9b73ed808f56e26a2ec295e8930d1eed5831db4d621a9b7dca25a58602b61ec9b9e4efb35e8b714f809645ba3b42669eaf5d7052ca3fc521a1389651d854b4c71f45a09d01a26205cd052e37107fa9b6503621e662a1e0c51f6d5701689d2f330ae551df329f68cf292ba9ee5a93813d4306776fce397f1afafb0ec2153d11f8774bd96ae65122d478ac5b96705f647b81d334a1a037e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}}}}]}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 23:06:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04480f1200ff040100800000c9000800faff2811ee8ae6f6e45775b13c742944605d817b6730a71370ea772df5256a27219700125904f4bdfd3ce40f466c8ff3461efa72a4cea450c7abf7f50ac896c00385718f9a7e8f0ee5a8eb109e9d34425d92432faa5a38b146815100d7e54ce36eccb3153dc426b7af2c643445dde7dd55df0ca0981dff5d20e735d575edd2743d8ea96aec412a35dfdff7"], 0x12) 23:06:11 executing program 2: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="ffc88010000c00ebaf28e74f2e76425888ece40500170008000000000000000000"], 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x93}, "101aaf09d79d82f91351facaa209b2f02862b70caa042fbb449c519a570f55d277a034e134896f7c727acc755353bdddc5a002cc9e8f3215ae173f3a22ff244aaa38fd488b1fb395324b718537cde02e7ff3da7fac8a158dc792a8c48c11b792aa48b959c1ba6c076c132ae4762dc87d3acf62c98ba535bb88e6f601103bac454c6795c2043622257c88d3b8c8373fb9dfc33d"}, 0x97) [ 300.754011][ T3636] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:11 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc", 0x0, 0x1}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04480f1200ff040100800000c9000800faff2811ee8ae6f6e45775b13c742944605d817b6730a71370ea772df5256a27219700125904f4bdfd3ce40f466c8ff3461efa72a4cea450c7abf7f50ac896c00385718f9a7e8f0ee5a8eb109e9d34425d92432faa5a38b146815100d7e54ce36eccb3153dc426b7af2c643445dde7dd55df0ca0981dff5d20e735d575edd2743d8ea96aec412a35dfdff7"], 0x12) [ 300.843431][ T3636] Bluetooth: hci1: unexpected event 0x48 length: 15 > 3 [ 300.843465][ T3636] Bluetooth: hci1: Malformed Event: 0x48 23:06:11 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04480f1200ff040100800000c9000800faff2811ee8ae6f6e45775b13c742944605d817b6730a71370ea772df5256a27219700125904f4bdfd3ce40f466c8ff3461efa72a4cea450c7abf7f50ac896c00385718f9a7e8f0ee5a8eb109e9d34425d92432faa5a38b146815100d7e54ce36eccb3153dc426b7af2c643445dde7dd55df0ca0981dff5d20e735d575edd2743d8ea96aec412a35dfdff7"], 0x12) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04480f1200ff040100800000c9000800faff2811ee8ae6f6e45775b13c742944605d817b6730a71370ea772df5256a27219700125904f4bdfd3ce40f466c8ff3461efa72a4cea450c7abf7f50ac896c00385718f9a7e8f0ee5a8eb109e9d34425d92432faa5a38b146815100d7e54ce36eccb3153dc426b7af2c643445dde7dd55df0ca0981dff5d20e735d575edd2743d8ea96aec412a35dfdff7"], 0x12) (async) 23:06:11 executing program 3: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x21}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80004}, 0x40) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c004f251b52080000002b6cc7b395d5ce000e03666c60f05de82803baf4cf92aae16df5d8ebd4afb88ac50634b7448d71b929ca10b2e4c635efb1dc0eee4f86bff10642e2957070ee5b8b4edd36c6feecceea809f5bf2bb6860313c616de8fa41e64829d5779ccf477a44151a0ffc2b29c269c5c05c5f6b721eff2be900d38ff5c078e0", @ANYRES8=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) [ 300.908326][ T3636] Bluetooth: hci1: unexpected event 0x48 length: 15 > 3 [ 300.908359][ T3636] Bluetooth: hci1: Malformed Event: 0x48 23:06:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:11 executing program 2: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="ffc88010000c00ebaf28e74f2e76425888ece40500170008000000000000000000"], 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x93}, "101aaf09d79d82f91351facaa209b2f02862b70caa042fbb449c519a570f55d277a034e134896f7c727acc755353bdddc5a002cc9e8f3215ae173f3a22ff244aaa38fd488b1fb395324b718537cde02e7ff3da7fac8a158dc792a8c48c11b792aa48b959c1ba6c076c132ae4762dc87d3acf62c98ba535bb88e6f601103bac454c6795c2043622257c88d3b8c8373fb9dfc33d"}, 0x97) [ 300.956778][ T3636] Bluetooth: hci1: unexpected event 0x48 length: 15 > 3 [ 300.956810][ T3636] Bluetooth: hci1: Malformed Event: 0x48 [ 300.967464][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 300.977897][ T3653] Bluetooth: hci1: unexpected event 0x48 length: 15 > 3 [ 300.977928][ T3653] Bluetooth: hci1: Malformed Event: 0x48 23:06:11 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000700)=""/177, &(0x7f0000000080)=0xb1) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'pimreg1\x00', {0x2, 0x0, @empty}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4d9b77a6af2d8aa126bd7000fedbdf25ff101401fc03000000220000080002e21f32d30f6c000a010001"], 0x24}, 0x1, 0x0, 0x0, 0x28049085}, 0x20000805) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x20a002, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r4, 0x8004500b, 0x0) syz_clone(0x40000000, &(0x7f0000000400)='x', 0x1, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="bf4f88caf2b4e37c827c313f9c0c5a5d9c9a03fc4d1573233be8988997d28984d93dec5b479d6086") sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000640)="623eb417756c124546d23dd4589f1c1ebc7658a4f33b4923bcd7b3cc6846f415c0305f29d3a77a19d6afe67bfd3b8026e6166d6f84e328f594a6ac6cde868b6a332e538d980f89406c5b10d6df0690ae7ac75fe76dba722f3a086d9d27bdcdc5537de2291e156616f59d916cc1945260bd6b4ef36e841f6207d426cfed66a53ca3788ec9cb35799a63", 0x89) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xf}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x220041, 0x0) socket$key(0xf, 0x3, 0x2) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000700)=""/177, &(0x7f0000000080)=0xb1) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'pimreg1\x00', {0x2, 0x0, @empty}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4d9b77a6af2d8aa126bd7000fedbdf25ff101401fc03000000220000080002e21f32d30f6c000a010001"], 0x24}, 0x1, 0x0, 0x0, 0x28049085}, 0x20000805) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x20a002, 0x0) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) ioctl$SNDCTL_DSP_GETFMTS(r4, 0x8004500b, 0x0) (async) syz_clone(0x40000000, &(0x7f0000000400)='x', 0x1, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="bf4f88caf2b4e37c827c313f9c0c5a5d9c9a03fc4d1573233be8988997d28984d93dec5b479d6086") (async) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) (async) openat$audio1(0xffffff9c, &(0x7f0000000000), 0x20040, 0x0) (async) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, 0x0) (async) write$dsp(0xffffffffffffffff, &(0x7f0000000640)="623eb417756c124546d23dd4589f1c1ebc7658a4f33b4923bcd7b3cc6846f415c0305f29d3a77a19d6afe67bfd3b8026e6166d6f84e328f594a6ac6cde868b6a332e538d980f89406c5b10d6df0690ae7ac75fe76dba722f3a086d9d27bdcdc5537de2291e156616f59d916cc1945260bd6b4ef36e841f6207d426cfed66a53ca3788ec9cb35799a63", 0x89) (async) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xf}}, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x220041, 0x0) (async) [ 301.037502][ T143] usb 2-1: new full-speed USB device number 18 using dummy_hcd 23:06:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 301.132866][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 301.217489][ T4982] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 301.447382][ T143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.458928][ T143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 301.476543][ T143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.486400][ T143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 301.587412][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.598435][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.609368][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 301.618864][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.635978][ T4982] usb 4-1: config 0 descriptor?? [ 301.667380][ T143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.676580][ T143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.685197][ T143] usb 2-1: Product: syz [ 301.690007][ T143] usb 2-1: Manufacturer: syz [ 301.694812][ T143] usb 2-1: SerialNumber: syz [ 301.718479][ T6641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.749634][ T143] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 301.756589][ T143] cdc_ncm 2-1:1.0: bind() failure [ 301.765224][ T143] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 301.772487][ T143] cdc_ncm 2-1:1.1: bind() failure [ 301.950025][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.969050][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.993088][ T15] usb 2-1: USB disconnect, device number 18 [ 302.217402][ T4982] usbhid 4-1:0.0: can't add hid device: -71 [ 302.223901][ T4982] usbhid: probe of 4-1:0.0 failed with error -71 [ 302.242311][ T4982] usb 4-1: USB disconnect, device number 47 23:06:12 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = gettid() r2 = getpgrp(r1) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x8, 0x200000) syz_clone3(&(0x7f00000002c0)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xd}, &(0x7f00000000c0)=""/162, 0xa2, &(0x7f0000000180)=""/139, &(0x7f0000000240)=[r2, r0], 0x2, {r3}}, 0x58) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0282000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:06:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x63}, "c203abb78d7097e6a232986ad513af18099577f2f617ea56b35e26909a6cdc241e07ef94f600b15dd6a6dd0343ebc70ca1cce06d2509fb1c9a597dc306fab316fd1ac52159645ecbde46c9a2ef1e8626f56c8e1db336122bf8a0e1dc7c811391406a3e"}, 0x67) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12d}, @l2cap_cid_signaling={{0x129}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x9, 0x1ff, 0x6}}, @l2cap_create_chan_rsp={{0xd, 0x71, 0x8}, {0x4, 0x4ca, 0x8, 0x100}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x6, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x51, 0x4}, {0x8000, 0x3}}, @l2cap_conf_req={{0x4, 0x7f, 0x8}, {0x1000, 0x101, [@l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x40, 0xe8}, {0x4, 0x100, "4a2ff835b6692d2e5e3dda2ebc2971ca2019fcc463f688ae2063fea9169cff9c4e8d7b139bcb74258b28882257eaf636b33bc19ab237b9bcf0bd18942dbe34cbb36415d3d96688d8a84cf6de046a8715eab6ca1bf63907c70a34f2f72b8beb2ec263512a2c783a64a4291cfb3ac4300d447822282e75e9b126255de8430985f42c476fb4a2c3d6af7d24049ddc348059e1adfa1e7ea7d308926343aa2404e8e69a56b2822bf26972c19aec90a6c3fedd24748c12ed8592eb13e462b7426a1767320011797396fedbacd1d8ee990988163d22dc64c26a57d89c3bbee1dae136a3847a2a4d"}}, @l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x5e9, 0x7, 0x2, 0x4}}]}}, 0x132) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x88}}}, 0xd) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="280c203061ea47bb000ca202f39882537c5b"], 0xf) 23:06:12 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:12 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000000"], 0x15) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x63}, "c203abb78d7097e6a232986ad513af18099577f2f617ea56b35e26909a6cdc241e07ef94f600b15dd6a6dd0343ebc70ca1cce06d2509fb1c9a597dc306fab316fd1ac52159645ecbde46c9a2ef1e8626f56c8e1db336122bf8a0e1dc7c811391406a3e"}, 0x67) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12d}, @l2cap_cid_signaling={{0x129}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x9, 0x1ff, 0x6}}, @l2cap_create_chan_rsp={{0xd, 0x71, 0x8}, {0x4, 0x4ca, 0x8, 0x100}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x6, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x51, 0x4}, {0x8000, 0x3}}, @l2cap_conf_req={{0x4, 0x7f, 0x8}, {0x1000, 0x101, [@l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x40, 0xe8}, {0x4, 0x100, "4a2ff835b6692d2e5e3dda2ebc2971ca2019fcc463f688ae2063fea9169cff9c4e8d7b139bcb74258b28882257eaf636b33bc19ab237b9bcf0bd18942dbe34cbb36415d3d96688d8a84cf6de046a8715eab6ca1bf63907c70a34f2f72b8beb2ec263512a2c783a64a4291cfb3ac4300d447822282e75e9b126255de8430985f42c476fb4a2c3d6af7d24049ddc348059e1adfa1e7ea7d308926343aa2404e8e69a56b2822bf26972c19aec90a6c3fedd24748c12ed8592eb13e462b7426a1767320011797396fedbacd1d8ee990988163d22dc64c26a57d89c3bbee1dae136a3847a2a4d"}}, @l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x5e9, 0x7, 0x2, 0x4}}]}}, 0x132) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x88}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="280c203061ea47bb000ca202f39882537c5b"], 0xf) [ 302.541476][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 302.547822][ T3653] Bluetooth: hci3: ACL packet for unknown connection handle 0 23:06:12 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="05009b8b6468de9cb89bf8711ee187e1000000000000ff"], 0x9) [ 302.658918][ T3653] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 302.669907][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 302.676052][ T3653] Bluetooth: hci5: ISO packet for unknown connection handle 2816 23:06:12 executing program 3: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x21}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80004}, 0x40) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c004f251b52080000002b6cc7b395d5ce000e03666c60f05de82803baf4cf92aae16df5d8ebd4afb88ac50634b7448d71b929ca10b2e4c635efb1dc0eee4f86bff10642e2957070ee5b8b4edd36c6feecceea809f5bf2bb6860313c616de8fa41e64829d5779ccf477a44151a0ffc2b29c269c5c05c5f6b721eff2be900d38ff5c078e0", @ANYRES8=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 23:06:13 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803697100"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 23:06:13 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="05009b8b6468de9cb89bf8711ee187e1000000000000ff"], 0x9) 23:06:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x63}, "c203abb78d7097e6a232986ad513af18099577f2f617ea56b35e26909a6cdc241e07ef94f600b15dd6a6dd0343ebc70ca1cce06d2509fb1c9a597dc306fab316fd1ac52159645ecbde46c9a2ef1e8626f56c8e1db336122bf8a0e1dc7c811391406a3e"}, 0x67) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12d}, @l2cap_cid_signaling={{0x129}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x9, 0x1ff, 0x6}}, @l2cap_create_chan_rsp={{0xd, 0x71, 0x8}, {0x4, 0x4ca, 0x8, 0x100}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x6, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x51, 0x4}, {0x8000, 0x3}}, @l2cap_conf_req={{0x4, 0x7f, 0x8}, {0x1000, 0x101, [@l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x40, 0xe8}, {0x4, 0x100, "4a2ff835b6692d2e5e3dda2ebc2971ca2019fcc463f688ae2063fea9169cff9c4e8d7b139bcb74258b28882257eaf636b33bc19ab237b9bcf0bd18942dbe34cbb36415d3d96688d8a84cf6de046a8715eab6ca1bf63907c70a34f2f72b8beb2ec263512a2c783a64a4291cfb3ac4300d447822282e75e9b126255de8430985f42c476fb4a2c3d6af7d24049ddc348059e1adfa1e7ea7d308926343aa2404e8e69a56b2822bf26972c19aec90a6c3fedd24748c12ed8592eb13e462b7426a1767320011797396fedbacd1d8ee990988163d22dc64c26a57d89c3bbee1dae136a3847a2a4d"}}, @l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x5e9, 0x7, 0x2, 0x4}}]}}, 0x132) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x88}}}, 0xd) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="280c203061ea47bb000ca202f39882537c5b"], 0xf) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000000"], 0x15) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x63}, "c203abb78d7097e6a232986ad513af18099577f2f617ea56b35e26909a6cdc241e07ef94f600b15dd6a6dd0343ebc70ca1cce06d2509fb1c9a597dc306fab316fd1ac52159645ecbde46c9a2ef1e8626f56c8e1db336122bf8a0e1dc7c811391406a3e"}, 0x67) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12d}, @l2cap_cid_signaling={{0x129}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x9, 0x1ff, 0x6}}, @l2cap_create_chan_rsp={{0xd, 0x71, 0x8}, {0x4, 0x4ca, 0x8, 0x100}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x6, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x51, 0x4}, {0x8000, 0x3}}, @l2cap_conf_req={{0x4, 0x7f, 0x8}, {0x1000, 0x101, [@l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x40, 0xe8}, {0x4, 0x100, "4a2ff835b6692d2e5e3dda2ebc2971ca2019fcc463f688ae2063fea9169cff9c4e8d7b139bcb74258b28882257eaf636b33bc19ab237b9bcf0bd18942dbe34cbb36415d3d96688d8a84cf6de046a8715eab6ca1bf63907c70a34f2f72b8beb2ec263512a2c783a64a4291cfb3ac4300d447822282e75e9b126255de8430985f42c476fb4a2c3d6af7d24049ddc348059e1adfa1e7ea7d308926343aa2404e8e69a56b2822bf26972c19aec90a6c3fedd24748c12ed8592eb13e462b7426a1767320011797396fedbacd1d8ee990988163d22dc64c26a57d89c3bbee1dae136a3847a2a4d"}}, @l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x5e9, 0x7, 0x2, 0x4}}]}}, 0x132) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x88}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="280c203061ea47bb000ca202f39882537c5b"], 0xf) (async) [ 302.792293][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 302.798512][ T3653] Bluetooth: hci5: ISO packet for unknown connection handle 2816 [ 302.806342][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 302.880284][ T3655] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 302.888065][ T3655] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 303.197421][ T7] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 303.575059][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.596414][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.617606][ T7] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 303.634846][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.645819][ T7] usb 4-1: config 0 descriptor?? 23:06:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000700)=""/177, &(0x7f0000000080)=0xb1) (async, rerun: 64) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'pimreg1\x00', {0x2, 0x0, @empty}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4d9b77a6af2d8aa126bd7000fedbdf25ff101401fc03000000220000080002e21f32d30f6c000a010001"], 0x24}, 0x1, 0x0, 0x0, 0x28049085}, 0x20000805) (async) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x20a002, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) ioctl$SNDCTL_DSP_GETFMTS(r4, 0x8004500b, 0x0) (async) syz_clone(0x40000000, &(0x7f0000000400)='x', 0x1, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="bf4f88caf2b4e37c827c313f9c0c5a5d9c9a03fc4d1573233be8988997d28984d93dec5b479d6086") (async) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async, rerun: 32) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) (async, rerun: 64) openat$audio1(0xffffff9c, &(0x7f0000000000), 0x20040, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, 0x0) (async) write$dsp(0xffffffffffffffff, &(0x7f0000000640)="623eb417756c124546d23dd4589f1c1ebc7658a4f33b4923bcd7b3cc6846f415c0305f29d3a77a19d6afe67bfd3b8026e6166d6f84e328f594a6ac6cde868b6a332e538d980f89406c5b10d6df0690ae7ac75fe76dba722f3a086d9d27bdcdc5537de2291e156616f59d916cc1945260bd6b4ef36e841f6207d426cfed66a53ca3788ec9cb35799a63", 0x89) (async) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xf}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x220041, 0x0) 23:06:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="05009b8b6468de9cb89bf8711ee187e1000000000000ff"], 0x9) 23:06:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803697100"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803697100"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) (async) 23:06:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) (async) r1 = gettid() r2 = getpgrp(r1) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x8, 0x200000) syz_clone3(&(0x7f00000002c0)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xd}, &(0x7f00000000c0)=""/162, 0xa2, &(0x7f0000000180)=""/139, &(0x7f0000000240)=[r2, r0], 0x2, {r3}}, 0x58) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0282000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:06:14 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x30, r5, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd66}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2e}, @void, @val={0xc, 0x99, {0x6, 0x15}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x2) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x30, r0, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e0, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000881) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x95}, "16578a7afdd1348c22f38cc4b62a18e84d975d89bc1e000aeca3f9d1a5c9dbdfaf89f532dc62ac13284d4b9c60511ef3bd4144ab39a09c13a0243d8af6dce2cb8aee06470ab61de3185b0cfa947e82df629d9e5b676e2847116bebfa7ddf81aae72c169d1deb4ca9d014bce15f204b4e0b75e6a09884339e5ee36c6001a1cb0d4ce8b5858ccbebf816e128e28882455f00e10c6836"}, 0x99) [ 304.175257][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 304.182327][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 304.189588][ T3655] Bluetooth: hci5: ISO packet for unknown connection handle 2816 [ 304.199249][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 304.207617][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 304.213628][ T7] usbhid: probe of 4-1:0.0 failed with error -71 23:06:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803697100"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="044803697100"], 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) (async) [ 304.245607][ T7] usb 4-1: USB disconnect, device number 48 23:06:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3e}, "1cb84bebbbed5da555f80f6026368214df34ff4f8bc5343c4b3473bdfb10578b27cd004a7db38f82e5f6698099aaea8edeadc41421d41d4f3c4589e6a08f"}, 0x42) [ 304.319682][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 304.332673][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 304.338707][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 304.381404][ T3653] Bluetooth: hci1: wrong event for mode 0 23:06:14 executing program 3: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x21}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80004}, 0x40) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c004f251b52080000002b6cc7b395d5ce000e03666c60f05de82803baf4cf92aae16df5d8ebd4afb88ac50634b7448d71b929ca10b2e4c635efb1dc0eee4f86bff10642e2957070ee5b8b4edd36c6feecceea809f5bf2bb6860313c616de8fa41e64829d5779ccf477a44151a0ffc2b29c269c5c05c5f6b721eff2be900d38ff5c078e0", @ANYRES8=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 23:06:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x95}, "16578a7afdd1348c22f38cc4b62a18e84d975d89bc1e000aeca3f9d1a5c9dbdfaf89f532dc62ac13284d4b9c60511ef3bd4144ab39a09c13a0243d8af6dce2cb8aee06470ab61de3185b0cfa947e82df629d9e5b676e2847116bebfa7ddf81aae72c169d1deb4ca9d014bce15f204b4e0b75e6a09884339e5ee36c6001a1cb0d4ce8b5858ccbebf816e128e28882455f00e10c6836"}, 0x99) 23:06:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3e}, "1cb84bebbbed5da555f80f6026368214df34ff4f8bc5343c4b3473bdfb10578b27cd004a7db38f82e5f6698099aaea8edeadc41421d41d4f3c4589e6a08f"}, 0x42) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3e}, "1cb84bebbbed5da555f80f6026368214df34ff4f8bc5343c4b3473bdfb10578b27cd004a7db38f82e5f6698099aaea8edeadc41421d41d4f3c4589e6a08f"}, 0x42) (async) 23:06:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = fcntl$getown(0xffffffffffffffff, 0x9) (async) r1 = gettid() r2 = getpgrp(r1) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x8, 0x200000) syz_clone3(&(0x7f00000002c0)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xd}, &(0x7f00000000c0)=""/162, 0xa2, &(0x7f0000000180)=""/139, &(0x7f0000000240)=[r2, r0], 0x2, {r3}}, 0x58) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone(0xc0282000, 0x0, 0x0, 0x0, 0x0, 0x0) 23:06:15 executing program 5: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x21}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80004}, 0x40) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c004f251b52080000002b6cc7b395d5ce000e03666c60f05de82803baf4cf92aae16df5d8ebd4afb88ac50634b7448d71b929ca10b2e4c635efb1dc0eee4f86bff10642e2957070ee5b8b4edd36c6feecceea809f5bf2bb6860313c616de8fa41e64829d5779ccf477a44151a0ffc2b29c269c5c05c5f6b721eff2be900d38ff5c078e0", @ANYRES8=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 23:06:15 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x95}, "16578a7afdd1348c22f38cc4b62a18e84d975d89bc1e000aeca3f9d1a5c9dbdfaf89f532dc62ac13284d4b9c60511ef3bd4144ab39a09c13a0243d8af6dce2cb8aee06470ab61de3185b0cfa947e82df629d9e5b676e2847116bebfa7ddf81aae72c169d1deb4ca9d014bce15f204b4e0b75e6a09884339e5ee36c6001a1cb0d4ce8b5858ccbebf816e128e28882455f00e10c6836"}, 0x99) [ 304.776544][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 304.787369][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 304.805161][ T3653] Bluetooth: hci1: wrong event for mode 0 23:06:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3e}, "1cb84bebbbed5da555f80f6026368214df34ff4f8bc5343c4b3473bdfb10578b27cd004a7db38f82e5f6698099aaea8edeadc41421d41d4f3c4589e6a08f"}, 0x42) 23:06:15 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7a, 0x7a, 0x88, 0x40, 0x499, 0x101b, 0x5aca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x0, 0x20, 0x1, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="20121e0000000c2dce0291"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000080)={0x40, 0x23, 0x87, {0x87, 0xe, "956a5695b667069adce361f699dc55788f885fcd53b40d5ae8d936f590cce2d6b355911b51c2b587976c81d584c53afdc666d00ffc8c5005ec6117bcd49505dace1196ec9784fe03185d3852a8ddf0b499880dcdf831080c28997695946c6f9973f20f7a247483c05948e0c18e449536cce3293545edd2c695b60bcb69b16eb5387b7dc11b"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000140)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x63, 0x3, 0x0, 0x4, "fea1ecd4", "a8838de1"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x3f, 0x9, 0x8, 0x8, 0x7f}}}, &(0x7f0000000740)={0x44, &(0x7f0000000240)={0x40, 0x14, 0xd1, "5f996a74bf5dba21e8375aafa05cbf8fe3b79522d8c7cb55cfb36f0d846c2d14bf2fec35b2c64e21946ebf5c74c17ed08a55230c2766650c7d8229d5b711c47c914ef0f744c24ff4e01786aa6d9b9075e53127796166b05ca71529304c580775a121f11b51274005f0f5679f2523752d8b361ae5eb4ffe8b6fec5e5c27197a8f4b05abf5428ca4a16497189e794c4cdb9b5f74edce4aa01390ac42d069b84466bcb88b053fd5c0f03a58caae234de35933d3496dda92fe0e1a89a2a74b2e9126be95bf321c0a1d2af2b619750bf6fa5631"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1000, 0x65}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "5d95"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, '(D'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xd1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001980)={0x1c, &(0x7f0000001800)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 304.923619][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 304.967778][ T3653] Bluetooth: hci1: wrong event for mode 0 23:06:15 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r3 = dup(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x30, r5, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}]}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd66}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async, rerun: 32) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2e}, @void, @val={0xc, 0x99, {0x6, 0x15}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x2) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x30, r0, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}]}]}, 0x30}}, 0x0) (rerun: 32) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e0, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000881) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (rerun: 32) 23:06:15 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x67, 0x80000000, 0x9, 0x9, 0x4, r0}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f0000005c411c4ad08f2b26fc0c7cceaa6d977a6b68d42e5292d1e37da5bccaae66d3086e9ee4dccfd8dff6d8d6df5f32a0027f182f79fcfb28112d3ea7952491a295"], 0x7e) 23:06:15 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040)=[{0x80000000}], &(0x7f0000000080)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r0, r1, 0x2, [0xc5c, 0x4]}, {0x80000000, 0x0, 0x2, [0x5, 0x5]}, 0x1, [0x3, 0xfff]}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x1, 0x1}, 0x8) 23:06:15 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x67, 0x80000000, 0x9, 0x9, 0x4, r0}) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f0000005c411c4ad08f2b26fc0c7cceaa6d977a6b68d42e5292d1e37da5bccaae66d3086e9ee4dccfd8dff6d8d6df5f32a0027f182f79fcfb28112d3ea7952491a295"], 0x7e) [ 305.079081][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 305.156554][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 305.167475][ T143] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 305.207364][ T4982] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 305.267561][ T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 305.537540][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.555630][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.568509][ T143] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 305.577478][ T4982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.584177][ T143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.594417][ T4982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.614274][ T143] usb 4-1: config 0 descriptor?? [ 305.625626][ T4982] usb 6-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 305.644991][ T4982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.680361][ T23] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 305.689086][ T4982] usb 6-1: config 0 descriptor?? [ 305.694361][ T23] usb 2-1: config 0 has no interface number 0 [ 305.706913][ T23] usb 2-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=5a.ca [ 305.727112][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.745372][ T23] usb 2-1: config 0 descriptor?? [ 305.802361][ T23] snd-usb-audio: probe of 2-1:0.222 failed with error -2 [ 306.168389][ T143] usbhid 4-1:0.0: can't add hid device: -71 [ 306.174411][ T143] usbhid: probe of 4-1:0.0 failed with error -71 [ 306.190727][ T143] usb 4-1: USB disconnect, device number 49 [ 306.268636][ T4982] usbhid 6-1:0.0: can't add hid device: -71 [ 306.274652][ T4982] usbhid: probe of 6-1:0.0 failed with error -71 [ 306.295311][ T4982] usb 6-1: USB disconnect, device number 10 23:06:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe0, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x3e, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x56d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5d, 0x7, 0xff}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x5, 0x40, 0x3, 0x10, 0x7f}, 0xae, &(0x7f00000001c0)={0x5, 0xf, 0xae, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x20}, @generic={0x40, 0x10, 0xa, "63470ee92472eea2e9ef2406b4e853cd08121830da76554cac42f2c1185082442ce73c4eff3cf532a6a7c0d1ab57e1d5cadd16de5b54f10bbe4be2cdf3"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ee29bb19701c9ba72c34ed922e55ce39"}, @generic={0x41, 0x10, 0x1, "e9c1636ce3b3fea379547db64c3def73680502767eb0d52c92b31ed52c41127c0257dc4a28a44a99614de5e0a063eeb1ad6ca5244502563cbb9398001cbf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1f, 0x8, 0x2}]}, 0x5, [{0x8f, &(0x7f0000000280)=@string={0x8f, 0x3, "4fd5b34ca0c15b13cf11bfea7a9ae3fae9ec14d0f4b921649d32ee4d499659832415391f843d5a74d9dc819631bbdf2db03748288ea161431043af4d3f17d5fdeb28973ae722bac50a4ffa6b03f50c2055554e50ccbae25e90457a79163bf1da56b39c660d103c54397b2c726173423dad8c1978af6d24f0748defe9a623f3b11c45212bf96b501d3581b4a88d"}}, {0x9, &(0x7f0000000100)=@string={0x9, 0x3, "7a3b669932c1b9"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}, {0x45, &(0x7f0000000380)=@string={0x45, 0x3, "1cccd8c21d9242fed7e67de5305b075b6ce76dd6ba3d5a70991f7ed29f49b713d6e0e4886915e9dfc9ad0f2e6a2f47d7f71162bbfe5cfbc20f2c0fa58e5ddfc0194082"}}]}) r2 = syz_usb_connect(0x4, 0x931, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x23, 0x31, 0x22, 0x20, 0xa168, 0x610, 0xf4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91f, 0x2, 0x5, 0x0, 0x30, 0x4, [{{0x9, 0x4, 0xb1, 0x5, 0x10, 0x30, 0xd0, 0x4a, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x2, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "72d16d6091"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x23, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x83, 0x0, 0x200, 0x6, 0x9, 0x1f, [@generic={0x7c, 0x21, "ceb9333097fc8e128f2da866953b4564fc94b0fb9da81f942cc7555c4e145625e84ade331d709211817e57a68930b0a25b6474c8f1e698559988791e940a70d1a80dd89e20fae136bcac43ad7327e7d1e669280794ab414c6802c66326dd080b8786eba4a58e4ac6a004f1d6c0dbaf2ba5316257c6549ce8ba1a"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x4f, 0x3, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x0, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x101}]}}, {{0x9, 0x5, 0x9, 0x4, 0x1c7, 0x1, 0x0, 0x4, [@generic={0x4b, 0x21, "9dbced02a07f164e8988ec62a91dbfaa67eec65416e06fe3ace6aa3f9f23b07765df2943ea6a7b6429bbfbbac3d885333d0db37118b61bbc1d6bf0edb7d968dff98de14e0c76e99d1d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe9, 0x17}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x40, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x76, 0x4a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x2}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3bf, 0x40, 0x0, 0x80, [@generic={0xfd, 0x23, "8839ffb8ec2a2e66c5991573621824d4a20eae212bd946ea1d4872632344fb7f27b0352ea644a859721c23caa08c5f94e9d1fef0a41b852ff9864936b7e4e3fdf0c33dab0c90eba1276dcee78b5c7a77fab7fe606f33a7c8c28724e3f74176b8bcc02cbaae113e82cb42d7280cbe47d98e6b3a197d718ff1f7bc6234d23d7670bdd82ffe553c3322800aba0f7c90fb9aec816503e75023aa09ac6f8d05b89c29eb3ef387af7cc330370b106180ab1391a4f8590e432c5bde200c4a8f7adba2289eae38ba50c70f37df78ad77c1b7c9627e60f2a08e49074d4655cd34b37f359d44e79e7af667c1e038ff21e252687598efb0fb1bfc7a8394248352"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x4, 0x1f, 0xff, [@generic={0x37, 0x1, "b3cc51998ba73d6fa51803363ca977388dda224ee5c201c6c4630adaa4096c5921cb200b678eb9a23c40ebedbc69c4fe687ce9127d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x6, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x40}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x1, 0x3, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7b1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x4, 0x4, 0x40, [@generic={0xe7, 0x21, "202366146a09e48286d653caf448741ee9d072deb181083b55cdbae8b0d4fd00c2ca403ba13952678df2c5c4522b3a65b6e39d24cf5e10f50855904978c023688cf3d0b5df107ba190df7ca8a235301b6c2ff60fb81a9b90c43e9e6964920802ea9af1e14c6cc5bf38649c5febd1c082273322b1c5ad0848e1c23c9cc0440d9205ad83e5423eba4d376735d53dab8a05c8a625e721fe173104c2bc8f5a45ba3e880b2e69391106aa3fce80853bebccec07f8b977184a139708a0b3072e77693db4b37dc103f43871bc9eabef887271ad06b4c99a8860c6f61fd10c5bdc7cb7f983c72b6a8f"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x5af, 0x0, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xb041}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x56, 0x7, 0x82, [@generic={0x43, 0x10, "c205b56f338099da6e66e5057931c98a9353c4116c022d2fc4ab1557cbc8e59f4127f99cc67ccf314b86d774a05bbcf9b288cbfd565c473698b55f578c416a12b1"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x3, 0x20, 0x0, [@generic={0xb9, 0xf1286cee173470f5, "c9a003608bbda2dc1757da9183520c2bfcbc50c4c9bc41f012b1492e5f91e9f471519aa2e492abd8f19c8cc6c593297cd1a2737b48599886fa164351eb697fd2758279a810081831a1ce767ef094af29521496c63da60b6fb70f19df4c2e7cae4e4034cc585749d35cac12162402e5202c31e2ace93c1a8993a2c9a950f2c553577e1825474ed69b512bf9d0554d745366c86c47e318152c97280dad324b6969ce25350b42461d7e9c2992a735f7d3c514d41cc8a39e00"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0xca, 0x0, 0xa, 0xff, 0xc1, 0x8, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x8000}}], [{{0x9, 0x5, 0xd, 0x0, 0x210, 0x1f, 0x2, 0x9, [@generic={0x25, 0xd, "afe5cdd4c15d58935b5baaf5ec88a42c79ccc1a1e50f5727f80a5c8cbe6bd3e2fcdaf2"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x84, 0xf9, 0xb9, [@generic={0x13, 0x10, "aebd5f0e944e67905929606f1d3434b537"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x8, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2f}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x40, 0x81, 0xfc, [@generic={0x97, 0xf, "f4300ab8d1eb1be72526a0dfb1f184f2ad3a5a76430906416c9229bf46b2f9954945084592d19d5d45a79d8a425333152d0a8652ad6967b8db2e9922eacdd89462a9bb8b8df7c83335247e5e59799325eebb92478314ec1487a7d0d229729a97786de83210611a339849e069c3f0456dc196330fa533ce398a8d4a4a25d32778e461fc9ddbb877ccbaaf4daf3696a42125563060c7"}, @generic={0xf7, 0xb, "1f7959b9bba1dcaad16cb1ca6773f06aef857e4afe1ea3cf885f80d7897f5cabad7c8c5e15b2b11b2f595644321577f37c8ff0d71e80fc7b54c14b563e7c60e63a88cc77c691f520bb448042d72b9b23edfa2c9b5e0a838cdff2940c54796e3415ae4b80b04bbbb667f1f663e7b5ba6781a675b8475c43c2f96cc3dc410958b7ca5fa3f70fa14d7dafba1a1802d576c8e271ba7088e0a73fda3f2b341e18208265153c4e36ca6016202b00c364fb1e19889244f30623dcde907dadac1a39a9667df582f98c8afbf10887cbb47bef2c6f768547ea5ea82e8d039510868e06d18073d6134282f48ba2018e782f7615ef769f9fe91aca"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x65, 0x8, [@generic={0xa0, 0x31, "a2dfeafc03a4efbcab60bf016ddf5d3afb2f95e98df1fa140ce6887522cf4f640f8db016c0b195d0709fbe3d01f0d37eb5879660ab4690caf158bdaa24bac616f4e51962cdf2258aaa0a0a613b8bc4e41f6756e902e8dc5497cd4f1f91d9f22290691131e15791056d779d9c6ab536b459144457ef9310eec06c80e97979e8c5f91ca67790258b14029fbe0a7d53b668f77b10abf8d7fa20b1b3ed248eb3"}, @generic={0xe3, 0x6, "13548674febff5c8f977a3d34df9ea9aeb70a3bc5402ce05f74af35edd3a36de690ccf8cf2a43a002a61dab724184924b489031ec9d5a2f509ba6aa7c89900bd4f330293d655fe4b8d08f8f8d7d8749a25575e52a5b0fccd7b4dc233bb24556b98c3e4586ecd189a56cf11ecbf53c0f4ea5d7e4194cea7a0ad97c4887adf0e601972f96ee22551db461b1ebedb5f4c5655b7f5c7d01f0491ec45d949924c01cbc0e984adfa9a55f52677e15b580accbd77a3d5a829ae30c4eb45bca9e6b294b06469b3ac80003ac1324967c27e89255ee682dc8bf89917be77820b9790a53d2a1c"}]}}, {{0x9, 0x5, 0xf, 0x13, 0x3ff, 0xf8, 0x7f, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3e7, 0x6, 0x6, 0xfe, [@generic={0x41, 0x21, "94ccf1dfad42019c5b1c306655a0f390d433cafea001361f70a92e26c63a9d6a56ad00028cc3de36e9269e1a7498d9fcf17fc7ecc95f4089ae3dcc78302c76"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x44, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x281, 0xff, 0x2, 0x7f, 0xff, 0x7}, 0x10, &(0x7f0000000dc0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x81, 0xff, 0x2, 0x9}]}, 0x6, [{0x8b, &(0x7f0000000e00)=@string={0x8b, 0x3, "cfeaa4c55e77ddf71e99379e817df5c6ddd60825c8ab7a2c066c0d030c1c1b2a623364a6eeaca5995048a5df7859c6fed8c06c9fe73c9c867d0a1e7ab93db488bcce1c69d6d8147a6399ce8fd49e27a6e103966318dd81762e96134b704e9617d7263f6e103d57298a8faceb51ccf7e2ef1c02ddeecdce2bc07fb5162018509a19f864986251373a24"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x420}}, {0xed, &(0x7f0000000fc0)=@string={0xed, 0x3, "241ef1bacd8a753116769beef907abb77aba2fbd861757482c0da72b00d3ac65dd73ec68f2a9b7a0fd0f987dcaa8cb2615c993f1bb52b51780f7ea5ab622182e3daef84382fa6f3aae25613e79f6569e0941f85ea60bd8d24b8a774d09439a46ddb46c7cf94733e4f283c72485d6a3db704ca46e396d82faddf9197a9bd9ab4feaa4da674a9aafe85b51eaa9bed216b9cae6c2486e2a65abb43ed9337b7217215518da39cb51dcdc1304eebf54ecee7993080593c19a3584e16871768727763a080c4c154b6c4ab1e4a945ccaf4026bf29121d0fb243ac718ccdd0d3e599e8c29d5e047a49e9fe921620a9"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001340)={0x14, &(0x7f0000001140)={0x0, 0x21, 0xb0, {0xb0, 0x31, "4fd4c08e81be684a9a1c301adcdaaf68a55d7d3b845f7b680b57ee6142ed2738263f56269a6f62937886219ff86604dbbc4ccf69721d83f680a79e154fa10c21596e3c7651ec36c14577f7ee98d029947151704fd877f1cd6d379b43501d9d2a47eb63d32c721b8f77568a216cbd8d81ca4b65099777514854899997bdb9c08a4239c0ee61cc35f10687b766ae8bddac473acd50940e165f023e3db9f48db6e38076d0b4b2829963d76d1edabeac"}}, &(0x7f0000001200)={0x0, 0x3, 0x89, @string={0x89, 0x3, "e48f7ac42665d013aeb8a9b7dce9bbd81e58667c71b9b9cebb80eaef6b4e044c422ed5f8907873b7bee7b562e8d9a35923cf00c9b54b94f5176c452a9ae471a92f3c464017cf6709b190d9e65c7d08e9b523cf73cd4d5eff2f7bd1aa802e30d856f19a9ceac1c9b244664c29457f7c83bcaa949dd39295e69b4d93b91f1b165b5904883d30bf39"}}, &(0x7f00000012c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x2, 0x2, 0x8, "42e1"}, @global=@item_4={0x3, 0x1, 0x1, "ecbbf8a1"}, @global=@item_4={0x3, 0x1, 0x2, "447c439f"}, @global=@item_012={0x2, 0x1, 0x0, "fe65"}]}}, &(0x7f0000001300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x327}}}}, &(0x7f00000015c0)={0x18, &(0x7f0000001380)={0x0, 0x13, 0xac, "6856694e8a82528888a71d08af51084100c575787c48d89010ce3ded631a3306ad391e7f12ad1028a43caab8a8510bb5e147507d1e510b740c5a4ac39776dd2e8d7fc52c25c2c79feaf4b496c8d5fa85c8169deff11d961f924061ce08a9907434fe926d3fe6176ff31af74834f09fc09db106c7c209751192f3ac7a0da0502dd24af69cf1bab6910e03d23f67a0f158d1f76838e4a207e6083572ae5b8933fc6a6b3ea695d9ba46e07f0422"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000014c0)={0x20, 0x1, 0x97, "4f26805d0ccb700d8f3ecfbba76920929167185d0a92b69ee9aeda12fcfbd0080698d350779b1ca21ffaeebcfb4fd431008fff07773de42c25008e667d71b9075f7affcd7379adfd999bf679f6eaa29f0ad6493c5cded692e09f76b814ce009f0ba07f7b9db35235c450f33aa5fe476a803d81b85d4d989df2ac84c8a09ffbc6cc2566de8d7f2dad5a1595a354c895f3e18051366871c7"}, &(0x7f0000001580)={0x20, 0x3, 0x1, 0xfd}}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "53da02f8"}]}}, 0x0}, 0x0) 23:06:16 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040)=[{0x80000000}], &(0x7f0000000080)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r0, r1, 0x2, [0xc5c, 0x4]}, {0x80000000, 0x0, 0x2, [0x5, 0x5]}, 0x1, [0x3, 0xfff]}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x1, 0x1}, 0x8) 23:06:16 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x67, 0x80000000, 0x9, 0x9, 0x4, r0}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f0000005c411c4ad08f2b26fc0c7cceaa6d977a6b68d42e5292d1e37da5bccaae66d3086e9ee4dccfd8dff6d8d6df5f32a0027f182f79fcfb28112d3ea7952491a295"], 0x7e) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x67, 0x80000000, 0x9, 0x9, 0x4, r0}) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f0000005c411c4ad08f2b26fc0c7cceaa6d977a6b68d42e5292d1e37da5bccaae66d3086e9ee4dccfd8dff6d8d6df5f32a0027f182f79fcfb28112d3ea7952491a295"], 0x7e) (async) 23:06:16 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x30, r5, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}]}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd66}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async, rerun: 64) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2e}, @void, @val={0xc, 0x99, {0x6, 0x15}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x2) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x30, r0, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}]}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e0, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000881) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 306.712671][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 306.726424][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:17 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x2f5579a7a35dc290, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x1000, &(0x7f0000589000/0x1000)=nil}) dup3(r0, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:06:17 executing program 2: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000089}, 0x24004081) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:17 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040)=[{0x80000000}], &(0x7f0000000080)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{r0, r1, 0x2, [0xc5c, 0x4]}, {0x80000000, 0x0, 0x2, [0x5, 0x5]}, 0x1, [0x3, 0xfff]}) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x1, 0x1}, 0x8) [ 307.047367][ T143] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 307.477584][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.516351][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.526670][ T143] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 307.547266][ T143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.607119][ T143] usb 4-1: config 0 descriptor?? [ 308.003167][ T3724] usb 2-1: USB disconnect, device number 19 23:06:18 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7a, 0x7a, 0x88, 0x40, 0x499, 0x101b, 0x5aca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x0, 0x20, 0x1, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="20121e0000000c2dce0291"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000080)={0x40, 0x23, 0x87, {0x87, 0xe, "956a5695b667069adce361f699dc55788f885fcd53b40d5ae8d936f590cce2d6b355911b51c2b587976c81d584c53afdc666d00ffc8c5005ec6117bcd49505dace1196ec9784fe03185d3852a8ddf0b499880dcdf831080c28997695946c6f9973f20f7a247483c05948e0c18e449536cce3293545edd2c695b60bcb69b16eb5387b7dc11b"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000140)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x63, 0x3, 0x0, 0x4, "fea1ecd4", "a8838de1"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x3f, 0x9, 0x8, 0x8, 0x7f}}}, &(0x7f0000000740)={0x44, &(0x7f0000000240)={0x40, 0x14, 0xd1, "5f996a74bf5dba21e8375aafa05cbf8fe3b79522d8c7cb55cfb36f0d846c2d14bf2fec35b2c64e21946ebf5c74c17ed08a55230c2766650c7d8229d5b711c47c914ef0f744c24ff4e01786aa6d9b9075e53127796166b05ca71529304c580775a121f11b51274005f0f5679f2523752d8b361ae5eb4ffe8b6fec5e5c27197a8f4b05abf5428ca4a16497189e794c4cdb9b5f74edce4aa01390ac42d069b84466bcb88b053fd5c0f03a58caae234de35933d3496dda92fe0e1a89a2a74b2e9126be95bf321c0a1d2af2b619750bf6fa5631"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1000, 0x65}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "5d95"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, '(D'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xd1}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001980)={0x1c, &(0x7f0000001800)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) 23:06:18 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x2f5579a7a35dc290, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x1000, &(0x7f0000589000/0x1000)=nil}) dup3(r0, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x2f5579a7a35dc290, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x1000, &(0x7f0000589000/0x1000)=nil}) (async) dup3(r0, r1, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 23:06:18 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000ae0b9bc04619f4cc26cb0603b923ece7e4ac5fa33e5469f3fc49a972fb6c5b6d9d24d53625c3d0c32a678ef95662ca9e6890430d"], 0x6) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8e02400200001080c040500ff030200060c0200001f0081000501f702144dc7d3c82e7af90c0002001025040081000000"], 0x29) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4}, "cb5da51b"}, 0x8) 23:06:18 executing program 2: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000089}, 0x24004081) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000089}, 0x24004081) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) [ 308.079179][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.103738][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.179904][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 308.187734][ T143] usbhid 4-1:0.0: can't add hid device: -71 [ 308.194070][ T143] usbhid: probe of 4-1:0.0 failed with error -71 23:06:18 executing program 2: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000089}, 0x24004081) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 308.268795][ T143] usb 4-1: USB disconnect, device number 50 [ 308.547264][ T3724] usb 2-1: new high-speed USB device number 20 using dummy_hcd 23:06:18 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) write$6lowpan_enable(r3, &(0x7f0000000100)='1', 0x1) 23:06:18 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000ae0b9bc04619f4cc26cb0603b923ece7e4ac5fa33e5469f3fc49a972fb6c5b6d9d24d53625c3d0c32a678ef95662ca9e6890430d"], 0x6) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8e02400200001080c040500ff030200060c0200001f0081000501f702144dc7d3c82e7af90c0002001025040081000000"], 0x29) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4}, "cb5da51b"}, 0x8) 23:06:18 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x2f5579a7a35dc290, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x1000, &(0x7f0000589000/0x1000)=nil}) (async) dup3(r0, r1, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:06:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe0, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x3e, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x56d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5d, 0x7, 0xff}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x5, 0x40, 0x3, 0x10, 0x7f}, 0xae, &(0x7f00000001c0)={0x5, 0xf, 0xae, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x20}, @generic={0x40, 0x10, 0xa, "63470ee92472eea2e9ef2406b4e853cd08121830da76554cac42f2c1185082442ce73c4eff3cf532a6a7c0d1ab57e1d5cadd16de5b54f10bbe4be2cdf3"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ee29bb19701c9ba72c34ed922e55ce39"}, @generic={0x41, 0x10, 0x1, "e9c1636ce3b3fea379547db64c3def73680502767eb0d52c92b31ed52c41127c0257dc4a28a44a99614de5e0a063eeb1ad6ca5244502563cbb9398001cbf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1f, 0x8, 0x2}]}, 0x5, [{0x8f, &(0x7f0000000280)=@string={0x8f, 0x3, "4fd5b34ca0c15b13cf11bfea7a9ae3fae9ec14d0f4b921649d32ee4d499659832415391f843d5a74d9dc819631bbdf2db03748288ea161431043af4d3f17d5fdeb28973ae722bac50a4ffa6b03f50c2055554e50ccbae25e90457a79163bf1da56b39c660d103c54397b2c726173423dad8c1978af6d24f0748defe9a623f3b11c45212bf96b501d3581b4a88d"}}, {0x9, &(0x7f0000000100)=@string={0x9, 0x3, "7a3b669932c1b9"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}, {0x45, &(0x7f0000000380)=@string={0x45, 0x3, "1cccd8c21d9242fed7e67de5305b075b6ce76dd6ba3d5a70991f7ed29f49b713d6e0e4886915e9dfc9ad0f2e6a2f47d7f71162bbfe5cfbc20f2c0fa58e5ddfc0194082"}}]}) (async) r2 = syz_usb_connect(0x4, 0x931, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x23, 0x31, 0x22, 0x20, 0xa168, 0x610, 0xf4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91f, 0x2, 0x5, 0x0, 0x30, 0x4, [{{0x9, 0x4, 0xb1, 0x5, 0x10, 0x30, 0xd0, 0x4a, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x2, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "72d16d6091"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x23, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x83, 0x0, 0x200, 0x6, 0x9, 0x1f, [@generic={0x7c, 0x21, "ceb9333097fc8e128f2da866953b4564fc94b0fb9da81f942cc7555c4e145625e84ade331d709211817e57a68930b0a25b6474c8f1e698559988791e940a70d1a80dd89e20fae136bcac43ad7327e7d1e669280794ab414c6802c66326dd080b8786eba4a58e4ac6a004f1d6c0dbaf2ba5316257c6549ce8ba1a"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x4f, 0x3, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x0, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x101}]}}, {{0x9, 0x5, 0x9, 0x4, 0x1c7, 0x1, 0x0, 0x4, [@generic={0x4b, 0x21, "9dbced02a07f164e8988ec62a91dbfaa67eec65416e06fe3ace6aa3f9f23b07765df2943ea6a7b6429bbfbbac3d885333d0db37118b61bbc1d6bf0edb7d968dff98de14e0c76e99d1d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe9, 0x17}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x40, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x76, 0x4a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x2}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3bf, 0x40, 0x0, 0x80, [@generic={0xfd, 0x23, "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"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x4, 0x1f, 0xff, [@generic={0x37, 0x1, "b3cc51998ba73d6fa51803363ca977388dda224ee5c201c6c4630adaa4096c5921cb200b678eb9a23c40ebedbc69c4fe687ce9127d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x6, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x40}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x1, 0x3, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7b1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x4, 0x4, 0x40, [@generic={0xe7, 0x21, "202366146a09e48286d653caf448741ee9d072deb181083b55cdbae8b0d4fd00c2ca403ba13952678df2c5c4522b3a65b6e39d24cf5e10f50855904978c023688cf3d0b5df107ba190df7ca8a235301b6c2ff60fb81a9b90c43e9e6964920802ea9af1e14c6cc5bf38649c5febd1c082273322b1c5ad0848e1c23c9cc0440d9205ad83e5423eba4d376735d53dab8a05c8a625e721fe173104c2bc8f5a45ba3e880b2e69391106aa3fce80853bebccec07f8b977184a139708a0b3072e77693db4b37dc103f43871bc9eabef887271ad06b4c99a8860c6f61fd10c5bdc7cb7f983c72b6a8f"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x5af, 0x0, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xb041}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x56, 0x7, 0x82, [@generic={0x43, 0x10, "c205b56f338099da6e66e5057931c98a9353c4116c022d2fc4ab1557cbc8e59f4127f99cc67ccf314b86d774a05bbcf9b288cbfd565c473698b55f578c416a12b1"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x3, 0x20, 0x0, [@generic={0xb9, 0xf1286cee173470f5, "c9a003608bbda2dc1757da9183520c2bfcbc50c4c9bc41f012b1492e5f91e9f471519aa2e492abd8f19c8cc6c593297cd1a2737b48599886fa164351eb697fd2758279a810081831a1ce767ef094af29521496c63da60b6fb70f19df4c2e7cae4e4034cc585749d35cac12162402e5202c31e2ace93c1a8993a2c9a950f2c553577e1825474ed69b512bf9d0554d745366c86c47e318152c97280dad324b6969ce25350b42461d7e9c2992a735f7d3c514d41cc8a39e00"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0xca, 0x0, 0xa, 0xff, 0xc1, 0x8, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x8000}}], [{{0x9, 0x5, 0xd, 0x0, 0x210, 0x1f, 0x2, 0x9, [@generic={0x25, 0xd, "afe5cdd4c15d58935b5baaf5ec88a42c79ccc1a1e50f5727f80a5c8cbe6bd3e2fcdaf2"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x84, 0xf9, 0xb9, [@generic={0x13, 0x10, "aebd5f0e944e67905929606f1d3434b537"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x8, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2f}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x40, 0x81, 0xfc, [@generic={0x97, 0xf, "f4300ab8d1eb1be72526a0dfb1f184f2ad3a5a76430906416c9229bf46b2f9954945084592d19d5d45a79d8a425333152d0a8652ad6967b8db2e9922eacdd89462a9bb8b8df7c83335247e5e59799325eebb92478314ec1487a7d0d229729a97786de83210611a339849e069c3f0456dc196330fa533ce398a8d4a4a25d32778e461fc9ddbb877ccbaaf4daf3696a42125563060c7"}, @generic={0xf7, 0xb, "1f7959b9bba1dcaad16cb1ca6773f06aef857e4afe1ea3cf885f80d7897f5cabad7c8c5e15b2b11b2f595644321577f37c8ff0d71e80fc7b54c14b563e7c60e63a88cc77c691f520bb448042d72b9b23edfa2c9b5e0a838cdff2940c54796e3415ae4b80b04bbbb667f1f663e7b5ba6781a675b8475c43c2f96cc3dc410958b7ca5fa3f70fa14d7dafba1a1802d576c8e271ba7088e0a73fda3f2b341e18208265153c4e36ca6016202b00c364fb1e19889244f30623dcde907dadac1a39a9667df582f98c8afbf10887cbb47bef2c6f768547ea5ea82e8d039510868e06d18073d6134282f48ba2018e782f7615ef769f9fe91aca"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x65, 0x8, [@generic={0xa0, 0x31, "a2dfeafc03a4efbcab60bf016ddf5d3afb2f95e98df1fa140ce6887522cf4f640f8db016c0b195d0709fbe3d01f0d37eb5879660ab4690caf158bdaa24bac616f4e51962cdf2258aaa0a0a613b8bc4e41f6756e902e8dc5497cd4f1f91d9f22290691131e15791056d779d9c6ab536b459144457ef9310eec06c80e97979e8c5f91ca67790258b14029fbe0a7d53b668f77b10abf8d7fa20b1b3ed248eb3"}, @generic={0xe3, 0x6, "13548674febff5c8f977a3d34df9ea9aeb70a3bc5402ce05f74af35edd3a36de690ccf8cf2a43a002a61dab724184924b489031ec9d5a2f509ba6aa7c89900bd4f330293d655fe4b8d08f8f8d7d8749a25575e52a5b0fccd7b4dc233bb24556b98c3e4586ecd189a56cf11ecbf53c0f4ea5d7e4194cea7a0ad97c4887adf0e601972f96ee22551db461b1ebedb5f4c5655b7f5c7d01f0491ec45d949924c01cbc0e984adfa9a55f52677e15b580accbd77a3d5a829ae30c4eb45bca9e6b294b06469b3ac80003ac1324967c27e89255ee682dc8bf89917be77820b9790a53d2a1c"}]}}, {{0x9, 0x5, 0xf, 0x13, 0x3ff, 0xf8, 0x7f, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3e7, 0x6, 0x6, 0xfe, [@generic={0x41, 0x21, "94ccf1dfad42019c5b1c306655a0f390d433cafea001361f70a92e26c63a9d6a56ad00028cc3de36e9269e1a7498d9fcf17fc7ecc95f4089ae3dcc78302c76"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x44, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x281, 0xff, 0x2, 0x7f, 0xff, 0x7}, 0x10, &(0x7f0000000dc0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x81, 0xff, 0x2, 0x9}]}, 0x6, [{0x8b, &(0x7f0000000e00)=@string={0x8b, 0x3, "cfeaa4c55e77ddf71e99379e817df5c6ddd60825c8ab7a2c066c0d030c1c1b2a623364a6eeaca5995048a5df7859c6fed8c06c9fe73c9c867d0a1e7ab93db488bcce1c69d6d8147a6399ce8fd49e27a6e103966318dd81762e96134b704e9617d7263f6e103d57298a8faceb51ccf7e2ef1c02ddeecdce2bc07fb5162018509a19f864986251373a24"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x420}}, {0xed, &(0x7f0000000fc0)=@string={0xed, 0x3, "241ef1bacd8a753116769beef907abb77aba2fbd861757482c0da72b00d3ac65dd73ec68f2a9b7a0fd0f987dcaa8cb2615c993f1bb52b51780f7ea5ab622182e3daef84382fa6f3aae25613e79f6569e0941f85ea60bd8d24b8a774d09439a46ddb46c7cf94733e4f283c72485d6a3db704ca46e396d82faddf9197a9bd9ab4feaa4da674a9aafe85b51eaa9bed216b9cae6c2486e2a65abb43ed9337b7217215518da39cb51dcdc1304eebf54ecee7993080593c19a3584e16871768727763a080c4c154b6c4ab1e4a945ccaf4026bf29121d0fb243ac718ccdd0d3e599e8c29d5e047a49e9fe921620a9"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001340)={0x14, &(0x7f0000001140)={0x0, 0x21, 0xb0, {0xb0, 0x31, "4fd4c08e81be684a9a1c301adcdaaf68a55d7d3b845f7b680b57ee6142ed2738263f56269a6f62937886219ff86604dbbc4ccf69721d83f680a79e154fa10c21596e3c7651ec36c14577f7ee98d029947151704fd877f1cd6d379b43501d9d2a47eb63d32c721b8f77568a216cbd8d81ca4b65099777514854899997bdb9c08a4239c0ee61cc35f10687b766ae8bddac473acd50940e165f023e3db9f48db6e38076d0b4b2829963d76d1edabeac"}}, &(0x7f0000001200)={0x0, 0x3, 0x89, @string={0x89, 0x3, "e48f7ac42665d013aeb8a9b7dce9bbd81e58667c71b9b9cebb80eaef6b4e044c422ed5f8907873b7bee7b562e8d9a35923cf00c9b54b94f5176c452a9ae471a92f3c464017cf6709b190d9e65c7d08e9b523cf73cd4d5eff2f7bd1aa802e30d856f19a9ceac1c9b244664c29457f7c83bcaa949dd39295e69b4d93b91f1b165b5904883d30bf39"}}, &(0x7f00000012c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x2, 0x2, 0x8, "42e1"}, @global=@item_4={0x3, 0x1, 0x1, "ecbbf8a1"}, @global=@item_4={0x3, 0x1, 0x2, "447c439f"}, @global=@item_012={0x2, 0x1, 0x0, "fe65"}]}}, &(0x7f0000001300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x327}}}}, &(0x7f00000015c0)={0x18, &(0x7f0000001380)={0x0, 0x13, 0xac, "6856694e8a82528888a71d08af51084100c575787c48d89010ce3ded631a3306ad391e7f12ad1028a43caab8a8510bb5e147507d1e510b740c5a4ac39776dd2e8d7fc52c25c2c79feaf4b496c8d5fa85c8169deff11d961f924061ce08a9907434fe926d3fe6176ff31af74834f09fc09db106c7c209751192f3ac7a0da0502dd24af69cf1bab6910e03d23f67a0f158d1f76838e4a207e6083572ae5b8933fc6a6b3ea695d9ba46e07f0422"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000014c0)={0x20, 0x1, 0x97, "4f26805d0ccb700d8f3ecfbba76920929167185d0a92b69ee9aeda12fcfbd0080698d350779b1ca21ffaeebcfb4fd431008fff07773de42c25008e667d71b9075f7affcd7379adfd999bf679f6eaa29f0ad6493c5cded692e09f76b814ce009f0ba07f7b9db35235c450f33aa5fe476a803d81b85d4d989df2ac84c8a09ffbc6cc2566de8d7f2dad5a1595a354c895f3e18051366871c7"}, &(0x7f0000001580)={0x20, 0x3, 0x1, 0xfd}}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "53da02f8"}]}}, 0x0}, 0x0) [ 308.698405][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:19 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000ae0b9bc04619f4cc26cb0603b923ece7e4ac5fa33e5469f3fc49a972fb6c5b6d9d24d53625c3d0c32a678ef95662ca9e6890430d"], 0x6) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8e02400200001080c040500ff030200060c0200001f0081000501f702144dc7d3c82e7af90c0002001025040081000000"], 0x29) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4}, "cb5da51b"}, 0x8) [ 308.889068][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:19 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x6, 0xc8, 0x6, 0x3, 0xfff9}}}, 0xb) [ 308.967492][ T3724] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 308.996489][ T3724] usb 2-1: config 0 has no interface number 0 23:06:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x27) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x98, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004840}, 0x40040) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xa0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bb9fe3fa0a8a42ce7300"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "64f0a8592d5014bbae12e99d8c2b63fb1429c7fa9e79a922"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0xa0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8a0, 0x0, 0x0, 0xa1e7}}}}]}, 0x78}}, 0x0) [ 309.020541][ T3724] usb 2-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=5a.ca [ 309.029845][ T15] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 309.040309][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 309.108520][ T3724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.164494][ T3724] usb 2-1: config 0 descriptor?? [ 309.176822][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 309.280783][ T3724] snd-usb-audio: probe of 2-1:0.222 failed with error -2 [ 309.388165][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.411298][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.443015][ T15] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 309.473312][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.496978][ T15] usb 4-1: config 0 descriptor?? 23:06:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7a, 0x7a, 0x88, 0x40, 0x499, 0x101b, 0x5aca, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x0, 0x20, 0x1, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="20121e0000000c2dce0291"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000080)={0x40, 0x23, 0x87, {0x87, 0xe, "956a5695b667069adce361f699dc55788f885fcd53b40d5ae8d936f590cce2d6b355911b51c2b587976c81d584c53afdc666d00ffc8c5005ec6117bcd49505dace1196ec9784fe03185d3852a8ddf0b499880dcdf831080c28997695946c6f9973f20f7a247483c05948e0c18e449536cce3293545edd2c695b60bcb69b16eb5387b7dc11b"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000140)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x63, 0x3, 0x0, 0x4, "fea1ecd4", "a8838de1"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x3f, 0x9, 0x8, 0x8, 0x7f}}}, &(0x7f0000000740)={0x44, &(0x7f0000000240)={0x40, 0x14, 0xd1, "5f996a74bf5dba21e8375aafa05cbf8fe3b79522d8c7cb55cfb36f0d846c2d14bf2fec35b2c64e21946ebf5c74c17ed08a55230c2766650c7d8229d5b711c47c914ef0f744c24ff4e01786aa6d9b9075e53127796166b05ca71529304c580775a121f11b51274005f0f5679f2523752d8b361ae5eb4ffe8b6fec5e5c27197a8f4b05abf5428ca4a16497189e794c4cdb9b5f74edce4aa01390ac42d069b84466bcb88b053fd5c0f03a58caae234de35933d3496dda92fe0e1a89a2a74b2e9126be95bf321c0a1d2af2b619750bf6fa5631"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1000, 0x65}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "5d95"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, '(D'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xd1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001980)={0x1c, &(0x7f0000001800)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) 23:06:19 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x6, 0xc8, 0x6, 0x3, 0xfff9}}}, 0xb) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x6, 0xc8, 0x6, 0x3, 0xfff9}}}, 0xb) (async) 23:06:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x27) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x1) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x98, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004840}, 0x40040) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xa0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bb9fe3fa0a8a42ce7300"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "64f0a8592d5014bbae12e99d8c2b63fb1429c7fa9e79a922"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0xa0}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8a0, 0x0, 0x0, 0xa1e7}}}}]}, 0x78}}, 0x0) 23:06:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x27) (async) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x98, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004840}, 0x40040) (async) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xa0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bb9fe3fa0a8a42ce7300"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "64f0a8592d5014bbae12e99d8c2b63fb1429c7fa9e79a922"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0xa0}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8a0, 0x0, 0x0, 0xa1e7}}}}]}, 0x78}}, 0x0) [ 309.530260][ T3166] usb 2-1: USB disconnect, device number 20 [ 309.558190][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 309.564117][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:19 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) write$6lowpan_enable(r3, &(0x7f0000000100)='1', 0x1) [ 309.970552][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.995006][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.067379][ T3166] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.087336][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 310.093361][ T15] usbhid: probe of 4-1:0.0 failed with error -71 [ 310.120761][ T15] usb 4-1: USB disconnect, device number 51 23:06:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe0, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x3e, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x56d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5d, 0x7, 0xff}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x5, 0x40, 0x3, 0x10, 0x7f}, 0xae, &(0x7f00000001c0)={0x5, 0xf, 0xae, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x20}, @generic={0x40, 0x10, 0xa, "63470ee92472eea2e9ef2406b4e853cd08121830da76554cac42f2c1185082442ce73c4eff3cf532a6a7c0d1ab57e1d5cadd16de5b54f10bbe4be2cdf3"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ee29bb19701c9ba72c34ed922e55ce39"}, @generic={0x41, 0x10, 0x1, "e9c1636ce3b3fea379547db64c3def73680502767eb0d52c92b31ed52c41127c0257dc4a28a44a99614de5e0a063eeb1ad6ca5244502563cbb9398001cbf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1f, 0x8, 0x2}]}, 0x5, [{0x8f, &(0x7f0000000280)=@string={0x8f, 0x3, "4fd5b34ca0c15b13cf11bfea7a9ae3fae9ec14d0f4b921649d32ee4d499659832415391f843d5a74d9dc819631bbdf2db03748288ea161431043af4d3f17d5fdeb28973ae722bac50a4ffa6b03f50c2055554e50ccbae25e90457a79163bf1da56b39c660d103c54397b2c726173423dad8c1978af6d24f0748defe9a623f3b11c45212bf96b501d3581b4a88d"}}, {0x9, &(0x7f0000000100)=@string={0x9, 0x3, "7a3b669932c1b9"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}, {0x45, &(0x7f0000000380)=@string={0x45, 0x3, "1cccd8c21d9242fed7e67de5305b075b6ce76dd6ba3d5a70991f7ed29f49b713d6e0e4886915e9dfc9ad0f2e6a2f47d7f71162bbfe5cfbc20f2c0fa58e5ddfc0194082"}}]}) r2 = syz_usb_connect(0x4, 0x931, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x23, 0x31, 0x22, 0x20, 0xa168, 0x610, 0xf4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91f, 0x2, 0x5, 0x0, 0x30, 0x4, [{{0x9, 0x4, 0xb1, 0x5, 0x10, 0x30, 0xd0, 0x4a, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x2, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "72d16d6091"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x23, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x83, 0x0, 0x200, 0x6, 0x9, 0x1f, [@generic={0x7c, 0x21, "ceb9333097fc8e128f2da866953b4564fc94b0fb9da81f942cc7555c4e145625e84ade331d709211817e57a68930b0a25b6474c8f1e698559988791e940a70d1a80dd89e20fae136bcac43ad7327e7d1e669280794ab414c6802c66326dd080b8786eba4a58e4ac6a004f1d6c0dbaf2ba5316257c6549ce8ba1a"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x4f, 0x3, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x0, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x101}]}}, {{0x9, 0x5, 0x9, 0x4, 0x1c7, 0x1, 0x0, 0x4, [@generic={0x4b, 0x21, "9dbced02a07f164e8988ec62a91dbfaa67eec65416e06fe3ace6aa3f9f23b07765df2943ea6a7b6429bbfbbac3d885333d0db37118b61bbc1d6bf0edb7d968dff98de14e0c76e99d1d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe9, 0x17}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x40, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x76, 0x4a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x2}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3bf, 0x40, 0x0, 0x80, [@generic={0xfd, 0x23, "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"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x4, 0x1f, 0xff, [@generic={0x37, 0x1, "b3cc51998ba73d6fa51803363ca977388dda224ee5c201c6c4630adaa4096c5921cb200b678eb9a23c40ebedbc69c4fe687ce9127d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x6, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x40}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x1, 0x3, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7b1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x4, 0x4, 0x40, [@generic={0xe7, 0x21, "202366146a09e48286d653caf448741ee9d072deb181083b55cdbae8b0d4fd00c2ca403ba13952678df2c5c4522b3a65b6e39d24cf5e10f50855904978c023688cf3d0b5df107ba190df7ca8a235301b6c2ff60fb81a9b90c43e9e6964920802ea9af1e14c6cc5bf38649c5febd1c082273322b1c5ad0848e1c23c9cc0440d9205ad83e5423eba4d376735d53dab8a05c8a625e721fe173104c2bc8f5a45ba3e880b2e69391106aa3fce80853bebccec07f8b977184a139708a0b3072e77693db4b37dc103f43871bc9eabef887271ad06b4c99a8860c6f61fd10c5bdc7cb7f983c72b6a8f"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x5af, 0x0, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xb041}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x56, 0x7, 0x82, [@generic={0x43, 0x10, "c205b56f338099da6e66e5057931c98a9353c4116c022d2fc4ab1557cbc8e59f4127f99cc67ccf314b86d774a05bbcf9b288cbfd565c473698b55f578c416a12b1"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x3, 0x20, 0x0, [@generic={0xb9, 0xf1286cee173470f5, "c9a003608bbda2dc1757da9183520c2bfcbc50c4c9bc41f012b1492e5f91e9f471519aa2e492abd8f19c8cc6c593297cd1a2737b48599886fa164351eb697fd2758279a810081831a1ce767ef094af29521496c63da60b6fb70f19df4c2e7cae4e4034cc585749d35cac12162402e5202c31e2ace93c1a8993a2c9a950f2c553577e1825474ed69b512bf9d0554d745366c86c47e318152c97280dad324b6969ce25350b42461d7e9c2992a735f7d3c514d41cc8a39e00"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0xca, 0x0, 0xa, 0xff, 0xc1, 0x8, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x8000}}], [{{0x9, 0x5, 0xd, 0x0, 0x210, 0x1f, 0x2, 0x9, [@generic={0x25, 0xd, "afe5cdd4c15d58935b5baaf5ec88a42c79ccc1a1e50f5727f80a5c8cbe6bd3e2fcdaf2"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x84, 0xf9, 0xb9, [@generic={0x13, 0x10, "aebd5f0e944e67905929606f1d3434b537"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x8, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2f}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x40, 0x81, 0xfc, [@generic={0x97, 0xf, "f4300ab8d1eb1be72526a0dfb1f184f2ad3a5a76430906416c9229bf46b2f9954945084592d19d5d45a79d8a425333152d0a8652ad6967b8db2e9922eacdd89462a9bb8b8df7c83335247e5e59799325eebb92478314ec1487a7d0d229729a97786de83210611a339849e069c3f0456dc196330fa533ce398a8d4a4a25d32778e461fc9ddbb877ccbaaf4daf3696a42125563060c7"}, @generic={0xf7, 0xb, "1f7959b9bba1dcaad16cb1ca6773f06aef857e4afe1ea3cf885f80d7897f5cabad7c8c5e15b2b11b2f595644321577f37c8ff0d71e80fc7b54c14b563e7c60e63a88cc77c691f520bb448042d72b9b23edfa2c9b5e0a838cdff2940c54796e3415ae4b80b04bbbb667f1f663e7b5ba6781a675b8475c43c2f96cc3dc410958b7ca5fa3f70fa14d7dafba1a1802d576c8e271ba7088e0a73fda3f2b341e18208265153c4e36ca6016202b00c364fb1e19889244f30623dcde907dadac1a39a9667df582f98c8afbf10887cbb47bef2c6f768547ea5ea82e8d039510868e06d18073d6134282f48ba2018e782f7615ef769f9fe91aca"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x65, 0x8, [@generic={0xa0, 0x31, "a2dfeafc03a4efbcab60bf016ddf5d3afb2f95e98df1fa140ce6887522cf4f640f8db016c0b195d0709fbe3d01f0d37eb5879660ab4690caf158bdaa24bac616f4e51962cdf2258aaa0a0a613b8bc4e41f6756e902e8dc5497cd4f1f91d9f22290691131e15791056d779d9c6ab536b459144457ef9310eec06c80e97979e8c5f91ca67790258b14029fbe0a7d53b668f77b10abf8d7fa20b1b3ed248eb3"}, @generic={0xe3, 0x6, "13548674febff5c8f977a3d34df9ea9aeb70a3bc5402ce05f74af35edd3a36de690ccf8cf2a43a002a61dab724184924b489031ec9d5a2f509ba6aa7c89900bd4f330293d655fe4b8d08f8f8d7d8749a25575e52a5b0fccd7b4dc233bb24556b98c3e4586ecd189a56cf11ecbf53c0f4ea5d7e4194cea7a0ad97c4887adf0e601972f96ee22551db461b1ebedb5f4c5655b7f5c7d01f0491ec45d949924c01cbc0e984adfa9a55f52677e15b580accbd77a3d5a829ae30c4eb45bca9e6b294b06469b3ac80003ac1324967c27e89255ee682dc8bf89917be77820b9790a53d2a1c"}]}}, {{0x9, 0x5, 0xf, 0x13, 0x3ff, 0xf8, 0x7f, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3e7, 0x6, 0x6, 0xfe, [@generic={0x41, 0x21, "94ccf1dfad42019c5b1c306655a0f390d433cafea001361f70a92e26c63a9d6a56ad00028cc3de36e9269e1a7498d9fcf17fc7ecc95f4089ae3dcc78302c76"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x44, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x281, 0xff, 0x2, 0x7f, 0xff, 0x7}, 0x10, &(0x7f0000000dc0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x81, 0xff, 0x2, 0x9}]}, 0x6, [{0x8b, &(0x7f0000000e00)=@string={0x8b, 0x3, "cfeaa4c55e77ddf71e99379e817df5c6ddd60825c8ab7a2c066c0d030c1c1b2a623364a6eeaca5995048a5df7859c6fed8c06c9fe73c9c867d0a1e7ab93db488bcce1c69d6d8147a6399ce8fd49e27a6e103966318dd81762e96134b704e9617d7263f6e103d57298a8faceb51ccf7e2ef1c02ddeecdce2bc07fb5162018509a19f864986251373a24"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x420}}, {0xed, &(0x7f0000000fc0)=@string={0xed, 0x3, "241ef1bacd8a753116769beef907abb77aba2fbd861757482c0da72b00d3ac65dd73ec68f2a9b7a0fd0f987dcaa8cb2615c993f1bb52b51780f7ea5ab622182e3daef84382fa6f3aae25613e79f6569e0941f85ea60bd8d24b8a774d09439a46ddb46c7cf94733e4f283c72485d6a3db704ca46e396d82faddf9197a9bd9ab4feaa4da674a9aafe85b51eaa9bed216b9cae6c2486e2a65abb43ed9337b7217215518da39cb51dcdc1304eebf54ecee7993080593c19a3584e16871768727763a080c4c154b6c4ab1e4a945ccaf4026bf29121d0fb243ac718ccdd0d3e599e8c29d5e047a49e9fe921620a9"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001340)={0x14, &(0x7f0000001140)={0x0, 0x21, 0xb0, {0xb0, 0x31, "4fd4c08e81be684a9a1c301adcdaaf68a55d7d3b845f7b680b57ee6142ed2738263f56269a6f62937886219ff86604dbbc4ccf69721d83f680a79e154fa10c21596e3c7651ec36c14577f7ee98d029947151704fd877f1cd6d379b43501d9d2a47eb63d32c721b8f77568a216cbd8d81ca4b65099777514854899997bdb9c08a4239c0ee61cc35f10687b766ae8bddac473acd50940e165f023e3db9f48db6e38076d0b4b2829963d76d1edabeac"}}, &(0x7f0000001200)={0x0, 0x3, 0x89, @string={0x89, 0x3, "e48f7ac42665d013aeb8a9b7dce9bbd81e58667c71b9b9cebb80eaef6b4e044c422ed5f8907873b7bee7b562e8d9a35923cf00c9b54b94f5176c452a9ae471a92f3c464017cf6709b190d9e65c7d08e9b523cf73cd4d5eff2f7bd1aa802e30d856f19a9ceac1c9b244664c29457f7c83bcaa949dd39295e69b4d93b91f1b165b5904883d30bf39"}}, &(0x7f00000012c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x2, 0x2, 0x8, "42e1"}, @global=@item_4={0x3, 0x1, 0x1, "ecbbf8a1"}, @global=@item_4={0x3, 0x1, 0x2, "447c439f"}, @global=@item_012={0x2, 0x1, 0x0, "fe65"}]}}, &(0x7f0000001300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x327}}}}, &(0x7f00000015c0)={0x18, &(0x7f0000001380)={0x0, 0x13, 0xac, "6856694e8a82528888a71d08af51084100c575787c48d89010ce3ded631a3306ad391e7f12ad1028a43caab8a8510bb5e147507d1e510b740c5a4ac39776dd2e8d7fc52c25c2c79feaf4b496c8d5fa85c8169deff11d961f924061ce08a9907434fe926d3fe6176ff31af74834f09fc09db106c7c209751192f3ac7a0da0502dd24af69cf1bab6910e03d23f67a0f158d1f76838e4a207e6083572ae5b8933fc6a6b3ea695d9ba46e07f0422"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000014c0)={0x20, 0x1, 0x97, "4f26805d0ccb700d8f3ecfbba76920929167185d0a92b69ee9aeda12fcfbd0080698d350779b1ca21ffaeebcfb4fd431008fff07773de42c25008e667d71b9075f7affcd7379adfd999bf679f6eaa29f0ad6493c5cded692e09f76b814ce009f0ba07f7b9db35235c450f33aa5fe476a803d81b85d4d989df2ac84c8a09ffbc6cc2566de8d7f2dad5a1595a354c895f3e18051366871c7"}, &(0x7f0000001580)={0x20, 0x3, 0x1, 0xfd}}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "53da02f8"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe0, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x3e, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x56d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5d, 0x7, 0xff}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x5, 0x40, 0x3, 0x10, 0x7f}, 0xae, &(0x7f00000001c0)={0x5, 0xf, 0xae, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x20}, @generic={0x40, 0x10, 0xa, "63470ee92472eea2e9ef2406b4e853cd08121830da76554cac42f2c1185082442ce73c4eff3cf532a6a7c0d1ab57e1d5cadd16de5b54f10bbe4be2cdf3"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ee29bb19701c9ba72c34ed922e55ce39"}, @generic={0x41, 0x10, 0x1, "e9c1636ce3b3fea379547db64c3def73680502767eb0d52c92b31ed52c41127c0257dc4a28a44a99614de5e0a063eeb1ad6ca5244502563cbb9398001cbf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1f, 0x8, 0x2}]}, 0x5, [{0x8f, &(0x7f0000000280)=@string={0x8f, 0x3, "4fd5b34ca0c15b13cf11bfea7a9ae3fae9ec14d0f4b921649d32ee4d499659832415391f843d5a74d9dc819631bbdf2db03748288ea161431043af4d3f17d5fdeb28973ae722bac50a4ffa6b03f50c2055554e50ccbae25e90457a79163bf1da56b39c660d103c54397b2c726173423dad8c1978af6d24f0748defe9a623f3b11c45212bf96b501d3581b4a88d"}}, {0x9, &(0x7f0000000100)=@string={0x9, 0x3, "7a3b669932c1b9"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}, {0x45, &(0x7f0000000380)=@string={0x45, 0x3, "1cccd8c21d9242fed7e67de5305b075b6ce76dd6ba3d5a70991f7ed29f49b713d6e0e4886915e9dfc9ad0f2e6a2f47d7f71162bbfe5cfbc20f2c0fa58e5ddfc0194082"}}]}) (async) syz_usb_connect(0x4, 0x931, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x23, 0x31, 0x22, 0x20, 0xa168, 0x610, 0xf4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91f, 0x2, 0x5, 0x0, 0x30, 0x4, [{{0x9, 0x4, 0xb1, 0x5, 0x10, 0x30, 0xd0, 0x4a, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x3, 0x2, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "72d16d6091"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x23, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0x1}]}], [{{0x9, 0x5, 0x83, 0x0, 0x200, 0x6, 0x9, 0x1f, [@generic={0x7c, 0x21, "ceb9333097fc8e128f2da866953b4564fc94b0fb9da81f942cc7555c4e145625e84ade331d709211817e57a68930b0a25b6474c8f1e698559988791e940a70d1a80dd89e20fae136bcac43ad7327e7d1e669280794ab414c6802c66326dd080b8786eba4a58e4ac6a004f1d6c0dbaf2ba5316257c6549ce8ba1a"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x4f, 0x3, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x0, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x101}]}}, {{0x9, 0x5, 0x9, 0x4, 0x1c7, 0x1, 0x0, 0x4, [@generic={0x4b, 0x21, "9dbced02a07f164e8988ec62a91dbfaa67eec65416e06fe3ace6aa3f9f23b07765df2943ea6a7b6429bbfbbac3d885333d0db37118b61bbc1d6bf0edb7d968dff98de14e0c76e99d1d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe9, 0x17}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x40, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x76, 0x4a, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x2}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3bf, 0x40, 0x0, 0x80, [@generic={0xfd, 0x23, "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"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x4, 0x1f, 0xff, [@generic={0x37, 0x1, "b3cc51998ba73d6fa51803363ca977388dda224ee5c201c6c4630adaa4096c5921cb200b678eb9a23c40ebedbc69c4fe687ce9127d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x6, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x40}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x1, 0x3, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7b1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x4, 0x4, 0x40, [@generic={0xe7, 0x21, "202366146a09e48286d653caf448741ee9d072deb181083b55cdbae8b0d4fd00c2ca403ba13952678df2c5c4522b3a65b6e39d24cf5e10f50855904978c023688cf3d0b5df107ba190df7ca8a235301b6c2ff60fb81a9b90c43e9e6964920802ea9af1e14c6cc5bf38649c5febd1c082273322b1c5ad0848e1c23c9cc0440d9205ad83e5423eba4d376735d53dab8a05c8a625e721fe173104c2bc8f5a45ba3e880b2e69391106aa3fce80853bebccec07f8b977184a139708a0b3072e77693db4b37dc103f43871bc9eabef887271ad06b4c99a8860c6f61fd10c5bdc7cb7f983c72b6a8f"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x5af, 0x0, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xb041}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x56, 0x7, 0x82, [@generic={0x43, 0x10, "c205b56f338099da6e66e5057931c98a9353c4116c022d2fc4ab1557cbc8e59f4127f99cc67ccf314b86d774a05bbcf9b288cbfd565c473698b55f578c416a12b1"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x3, 0x20, 0x0, [@generic={0xb9, 0xf1286cee173470f5, "c9a003608bbda2dc1757da9183520c2bfcbc50c4c9bc41f012b1492e5f91e9f471519aa2e492abd8f19c8cc6c593297cd1a2737b48599886fa164351eb697fd2758279a810081831a1ce767ef094af29521496c63da60b6fb70f19df4c2e7cae4e4034cc585749d35cac12162402e5202c31e2ace93c1a8993a2c9a950f2c553577e1825474ed69b512bf9d0554d745366c86c47e318152c97280dad324b6969ce25350b42461d7e9c2992a735f7d3c514d41cc8a39e00"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0xca, 0x0, 0xa, 0xff, 0xc1, 0x8, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x8000}}], [{{0x9, 0x5, 0xd, 0x0, 0x210, 0x1f, 0x2, 0x9, [@generic={0x25, 0xd, "afe5cdd4c15d58935b5baaf5ec88a42c79ccc1a1e50f5727f80a5c8cbe6bd3e2fcdaf2"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x84, 0xf9, 0xb9, [@generic={0x13, 0x10, "aebd5f0e944e67905929606f1d3434b537"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x8, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2f}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x40, 0x81, 0xfc, [@generic={0x97, 0xf, "f4300ab8d1eb1be72526a0dfb1f184f2ad3a5a76430906416c9229bf46b2f9954945084592d19d5d45a79d8a425333152d0a8652ad6967b8db2e9922eacdd89462a9bb8b8df7c83335247e5e59799325eebb92478314ec1487a7d0d229729a97786de83210611a339849e069c3f0456dc196330fa533ce398a8d4a4a25d32778e461fc9ddbb877ccbaaf4daf3696a42125563060c7"}, @generic={0xf7, 0xb, "1f7959b9bba1dcaad16cb1ca6773f06aef857e4afe1ea3cf885f80d7897f5cabad7c8c5e15b2b11b2f595644321577f37c8ff0d71e80fc7b54c14b563e7c60e63a88cc77c691f520bb448042d72b9b23edfa2c9b5e0a838cdff2940c54796e3415ae4b80b04bbbb667f1f663e7b5ba6781a675b8475c43c2f96cc3dc410958b7ca5fa3f70fa14d7dafba1a1802d576c8e271ba7088e0a73fda3f2b341e18208265153c4e36ca6016202b00c364fb1e19889244f30623dcde907dadac1a39a9667df582f98c8afbf10887cbb47bef2c6f768547ea5ea82e8d039510868e06d18073d6134282f48ba2018e782f7615ef769f9fe91aca"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x65, 0x8, [@generic={0xa0, 0x31, "a2dfeafc03a4efbcab60bf016ddf5d3afb2f95e98df1fa140ce6887522cf4f640f8db016c0b195d0709fbe3d01f0d37eb5879660ab4690caf158bdaa24bac616f4e51962cdf2258aaa0a0a613b8bc4e41f6756e902e8dc5497cd4f1f91d9f22290691131e15791056d779d9c6ab536b459144457ef9310eec06c80e97979e8c5f91ca67790258b14029fbe0a7d53b668f77b10abf8d7fa20b1b3ed248eb3"}, @generic={0xe3, 0x6, "13548674febff5c8f977a3d34df9ea9aeb70a3bc5402ce05f74af35edd3a36de690ccf8cf2a43a002a61dab724184924b489031ec9d5a2f509ba6aa7c89900bd4f330293d655fe4b8d08f8f8d7d8749a25575e52a5b0fccd7b4dc233bb24556b98c3e4586ecd189a56cf11ecbf53c0f4ea5d7e4194cea7a0ad97c4887adf0e601972f96ee22551db461b1ebedb5f4c5655b7f5c7d01f0491ec45d949924c01cbc0e984adfa9a55f52677e15b580accbd77a3d5a829ae30c4eb45bca9e6b294b06469b3ac80003ac1324967c27e89255ee682dc8bf89917be77820b9790a53d2a1c"}]}}, {{0x9, 0x5, 0xf, 0x13, 0x3ff, 0xf8, 0x7f, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3e7, 0x6, 0x6, 0xfe, [@generic={0x41, 0x21, "94ccf1dfad42019c5b1c306655a0f390d433cafea001361f70a92e26c63a9d6a56ad00028cc3de36e9269e1a7498d9fcf17fc7ecc95f4089ae3dcc78302c76"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x44, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x281, 0xff, 0x2, 0x7f, 0xff, 0x7}, 0x10, &(0x7f0000000dc0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x81, 0xff, 0x2, 0x9}]}, 0x6, [{0x8b, &(0x7f0000000e00)=@string={0x8b, 0x3, "cfeaa4c55e77ddf71e99379e817df5c6ddd60825c8ab7a2c066c0d030c1c1b2a623364a6eeaca5995048a5df7859c6fed8c06c9fe73c9c867d0a1e7ab93db488bcce1c69d6d8147a6399ce8fd49e27a6e103966318dd81762e96134b704e9617d7263f6e103d57298a8faceb51ccf7e2ef1c02ddeecdce2bc07fb5162018509a19f864986251373a24"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x420}}, {0xed, &(0x7f0000000fc0)=@string={0xed, 0x3, "241ef1bacd8a753116769beef907abb77aba2fbd861757482c0da72b00d3ac65dd73ec68f2a9b7a0fd0f987dcaa8cb2615c993f1bb52b51780f7ea5ab622182e3daef84382fa6f3aae25613e79f6569e0941f85ea60bd8d24b8a774d09439a46ddb46c7cf94733e4f283c72485d6a3db704ca46e396d82faddf9197a9bd9ab4feaa4da674a9aafe85b51eaa9bed216b9cae6c2486e2a65abb43ed9337b7217215518da39cb51dcdc1304eebf54ecee7993080593c19a3584e16871768727763a080c4c154b6c4ab1e4a945ccaf4026bf29121d0fb243ac718ccdd0d3e599e8c29d5e047a49e9fe921620a9"}}]}) (async) syz_usb_control_io$hid(r2, &(0x7f0000001340)={0x14, &(0x7f0000001140)={0x0, 0x21, 0xb0, {0xb0, 0x31, "4fd4c08e81be684a9a1c301adcdaaf68a55d7d3b845f7b680b57ee6142ed2738263f56269a6f62937886219ff86604dbbc4ccf69721d83f680a79e154fa10c21596e3c7651ec36c14577f7ee98d029947151704fd877f1cd6d379b43501d9d2a47eb63d32c721b8f77568a216cbd8d81ca4b65099777514854899997bdb9c08a4239c0ee61cc35f10687b766ae8bddac473acd50940e165f023e3db9f48db6e38076d0b4b2829963d76d1edabeac"}}, &(0x7f0000001200)={0x0, 0x3, 0x89, @string={0x89, 0x3, "e48f7ac42665d013aeb8a9b7dce9bbd81e58667c71b9b9cebb80eaef6b4e044c422ed5f8907873b7bee7b562e8d9a35923cf00c9b54b94f5176c452a9ae471a92f3c464017cf6709b190d9e65c7d08e9b523cf73cd4d5eff2f7bd1aa802e30d856f19a9ceac1c9b244664c29457f7c83bcaa949dd39295e69b4d93b91f1b165b5904883d30bf39"}}, &(0x7f00000012c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x2, 0x2, 0x8, "42e1"}, @global=@item_4={0x3, 0x1, 0x1, "ecbbf8a1"}, @global=@item_4={0x3, 0x1, 0x2, "447c439f"}, @global=@item_012={0x2, 0x1, 0x0, "fe65"}]}}, &(0x7f0000001300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x327}}}}, &(0x7f00000015c0)={0x18, &(0x7f0000001380)={0x0, 0x13, 0xac, "6856694e8a82528888a71d08af51084100c575787c48d89010ce3ded631a3306ad391e7f12ad1028a43caab8a8510bb5e147507d1e510b740c5a4ac39776dd2e8d7fc52c25c2c79feaf4b496c8d5fa85c8169deff11d961f924061ce08a9907434fe926d3fe6176ff31af74834f09fc09db106c7c209751192f3ac7a0da0502dd24af69cf1bab6910e03d23f67a0f158d1f76838e4a207e6083572ae5b8933fc6a6b3ea695d9ba46e07f0422"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000014c0)={0x20, 0x1, 0x97, "4f26805d0ccb700d8f3ecfbba76920929167185d0a92b69ee9aeda12fcfbd0080698d350779b1ca21ffaeebcfb4fd431008fff07773de42c25008e667d71b9075f7affcd7379adfd999bf679f6eaa29f0ad6493c5cded692e09f76b814ce009f0ba07f7b9db35235c450f33aa5fe476a803d81b85d4d989df2ac84c8a09ffbc6cc2566de8d7f2dad5a1595a354c895f3e18051366871c7"}, &(0x7f0000001580)={0x20, 0x3, 0x1, 0xfd}}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "53da02f8"}]}}, 0x0}, 0x0) (async) 23:06:20 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x6, 0xc8, 0x6, 0x3, 0xfff9}}}, 0xb) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x6, 0xc8, 0x6, 0x3, 0xfff9}}}, 0xb) (async) 23:06:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x27) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x98, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004840}, 0x40040) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xa0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bb9fe3fa0a8a42ce7300"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "64f0a8592d5014bbae12e99d8c2b63fb1429c7fa9e79a922"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0xa0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8a0, 0x0, 0x0, 0xa1e7}}}}]}, 0x78}}, 0x0) 23:06:20 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r2, r3, 0x0], &(0x7f0000000140)=[0x2, 0x6, 0x6, 0x100000000, 0x2, 0x3], 0x3d5, 0x4, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) r5 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r4, 0x3, r5, 0x3629, 0x80000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00002b3bdb608407c5fd00000000000f000000bef1233d05000000000000000080000f110f000000"], 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) [ 310.457473][ T3166] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 310.465942][ T3166] usb 2-1: config 0 has no interface number 0 [ 310.472734][ T3166] usb 2-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=5a.ca [ 310.482242][ T3166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.493390][ T3166] usb 2-1: config 0 descriptor?? 23:06:20 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x5) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) [ 310.536551][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 310.542586][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 310.559958][ T3166] snd-usb-audio: probe of 2-1:0.222 failed with error -2 23:06:20 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r2, r3, 0x0], &(0x7f0000000140)=[0x2, 0x6, 0x6, 0x100000000, 0x2, 0x3], 0x3d5, 0x4, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) r5 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r4, 0x3, r5, 0x3629, 0x80000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00002b3bdb608407c5fd00000000000f000000bef1233d05000000000000000080000f110f000000"], 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r2, r3, 0x0], &(0x7f0000000140)=[0x2, 0x6, 0x6, 0x100000000, 0x2, 0x3], 0x3d5, 0x4, 0x4}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) (async) openat$vga_arbiter(0xffffff9c, &(0x7f0000000240), 0x200000, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r4, 0x3, r5, 0x3629, 0x80000}) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00002b3bdb608407c5fd00000000000f000000bef1233d05000000000000000080000f110f000000"], 0x31) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) (async) 23:06:20 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) write$6lowpan_enable(r3, &(0x7f0000000100)='1', 0x1) [ 310.615786][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 310.643365][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000001200)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0xfffd, 0x9, 0x3, 0x8000}) 23:06:21 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x5) (async, rerun: 32) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fffffff) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:21 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, r2, r3, 0x0], &(0x7f0000000140)=[0x2, 0x6, 0x6, 0x100000000, 0x2, 0x3], 0x3d5, 0x4, 0x4}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) (async) r5 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r4, 0x3, r5, 0x3629, 0x80000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00002b3bdb608407c5fd00000000000f000000bef1233d05000000000000000080000f110f000000"], 0x31) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) (rerun: 32) [ 310.774274][ T3166] usb 2-1: USB disconnect, device number 21 [ 310.813997][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:21 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, '\x00\x00\b'}, {@none, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) 23:06:21 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x5) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x5) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fffffff) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) [ 310.917751][ T143] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 310.967027][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 310.974743][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 311.316511][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.343245][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.363555][ T143] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 311.381053][ T143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.396820][ T143] usb 4-1: config 0 descriptor?? [ 311.859263][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.871792][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.882333][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.891344][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.896513][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:06:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xb, "ce9c"}]}}, 0x0}, 0x0) 23:06:22 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, '\x00\x00\b'}, {@none, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) 23:06:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000001200)) (async) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0xfffd, 0x9, 0x3, 0x8000}) 23:06:22 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@any, 0x81, 0x6, "5a250e", 0x9, 0x9}, {@any, 0x91, 0x8, "ac21c8", 0x800, 0x20}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0xfe00}}}}, 0xf) 23:06:22 executing program 5: r0 = socket(0x11, 0xa, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = openat$ptmx(0xffffff9c, &(0x7f0000000540), 0x52040, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002800)='syz1\x00', 0x200002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$tcp_mem(0xffffff9c, &(0x7f0000002840)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r9 = getpid() r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r11]) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002880)=0x0) sendmsg$unix(r1, &(0x7f0000002980)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000000240)="7637970af357a880178be9745c31892581713185199cf38f396d9a75bc5d3c4282a28f06f4178435d26f245d9ff79f1b74e88587ef113033f078fb28cf3415bfbe940746f1af7110cb5da5282889db3647e9fedb9132fd21bb12e25da1053f90e7132347283ec6d86f0bdd0bb5babef224bea4716760c77c5a09529a6cb974ce337c656f0f898d4debc4ad5f3b4c13b3635156b94210fd7bf265f427e47d976a6076b13b44994b4e0214ca374aa6e9ad44b777af876674ffab924aed65092090b251b52b685d8e52e4f8d7a890087d361ce4cefc6399d8ac52b184", 0xdb}, {&(0x7f0000000140)}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000180)="cab80817ee5d2850ebd2f583a5169cff83136d250adf63521fdc99d30be1656bf643370dcbc0e819627191ac277cd834db0ed11d4675253b6864154081a952b5f30cc98b8d3d79db30136b32dfb0f0150433673f8b0f164196f5a454ddbd2dc88c", 0x61}, {&(0x7f00000005c0)="323e56c425f6c4b42d414ad25704c413da4c21b71ff631713540b5c80a90b9078c03721ccb063485389d28938148a9f7f3c5f78abc0b849fb37851a26296b6f402fcbef734e4ca8c3d94d94379dd467875174c0097a9b71c0cc9bd6777eff5f71ddba39865192aa5cd95f18357b2daa0748f6143da40673c40395c3180839bfc87033afdc80d2a3d21dc91c73c3d94148faa4a0eaf7d2827e6ebcf196f50c3859591e130b8d98aab30841f11b220714b28ecd91ab5e0f9d9013d81fd76354eb1bf562e6666ea13e37af58fa9236ef3bf743fc094abac5ff6b6480c8b86903a397ad4c70a343f0ca649ffe06e9ac2082c2465e9cc8db533de9530cfecf4f19a7983d7a6f4153110e88fd3112a5572891084f5606923778210d24de7aca73d92583a8fc64b00e10306903b7b2cab968f0a4780f09c4fe65978e1cdce7f5e6e6787ea6111b388192b27357f30213614fee3d100adc394f9a3e4868247edd1335ea9113bfac6571df7fef65e9cb5158b2450e9231bc0578e1f3ea8dfa508a6350aad09c5dfd252bd96a44a60f962e1806e1385abc8fb6ab55320faf06dea86c5a07b2c9fcaf89efc55db248fceb7c875bf2c1962985633351d44656bf2d410c162048cb0b43723501bf3a64aaae050497d8b134e135e85ee5131821d7227cdcf9dd68d28e5eb2266d9d6f79c3bf7defc9c3ecdc0c8f435a3247d12f761aa26a2daf78a4db5d59e8338d8f5313052006117a559e729c6d0af041ccaf53f076e8d8054d06c0ec3dab424aa8daa82c2ba795ad9ce60cb2eaf152285afe2f16f3974211d47c15c20b0bb183928d2e3d3b2c5adf39600a3a8a92c6d09e46348bd846265312127c4d3b958add026d0549ef1964739f632f21abd898e2d3eab26a645cf92b1535c40e7c68c1358dbd07326514f2cfd7201509cddd65d491d9c035bf99875701043a2fce0354291b4d434e6c8cd3d1592799f61a1551961a5e1f745a6be6ddd08bcfafd6f5edbebda57ef4987eb62d694edf38e788a8d5c2c027b2a64ec45048e4e4cdb6bb02b730d13e5ae6462e32d81d83795684a8ec0c2c7b6aa48a28231cfaef180cdbf4e5402320813cb98ed02e364676bb5985c3916762ea6884e12d6fb874d8fb0e3927f11599f6375614cf4949101ba7039abdbf39a350853f4b3d4ad966aff6ebcbc6b858f518b3142a14682318de9d6e39aad69f7bed7c54d3f30ca3df4b9d9b915fddcf58d9d2f0d72e9268290e84b3c697f1e0d7cfcdc83ee81c8bc7df2fcc08f1e68b9d8d13dd5d9da3144f890cd2004f525aa50d194b8d6165f84b4d8b509fe93c94dbd3970f87b4670be0737f58419c813fcc1051a26774e518d3ff77f99530fbf41970dd1cb0e5700247d528c8f9d83cb7f60957e91986c9c73c0464c0f2ed7bd26655dabd2ffcbb05649b691bed026647afd6c7305de10cd4bd1d592bd26b250907e7f1f07cf9b94680524b6eb03b4c0f40619d52e9c7ab2979c8bbbd08b0384c0577ff005da26250ee5d37e0215159c84816c321337da1d7a7c24214910a3782e921404ef338095768a9fa3923ace62e63a782d0b392b9338072c6d0fbb8fdf9a4abe39dcf29818f304c568ded5e0f31cfdfb2bb062435635456b9d6fe7f62aa0d03775365cbde194eb2d081f463e01592912455ef2219b8e65a84be6592cc7097e029642ab6d17022d5d052312e3f6110a429bd5299d6e3591c18fa3543f99679bb29c615f6d8143a8fc800dc692bbe5e8dcdc637d62b3410c43de9fe779543ea6b1e4aa8e0a6dec0f9e1daa584b73c0815ef520430f0e535329ebd34f84fa9860c63ab11b71896cad722bab1fcb9447d6253d8de4d7588e66748391d7de0baf3d8d0438053167a6261416482db80500ebbb6b360a687471ea5083aa7522288232e6cf1640b8b3550fe56eaf0ad26a2fd8dab78721022f86f6575ef1e73c016bfa05101b0d1d90fba4bcc4c949d1050e40d20d4cb3ee1f6683b4a9fb5de73a927f725d78a5f6d457efb5a4494bda915fa9232c280b0a534c9359eac48acbcd53e45a54e6a5755329773b8ce593c32386e04350d67276ab0cbb06171a20efd983af3a500ebe4f1ffe1edcfdf822734d156377368ae22829ff36a4bd0f2c2e4b94b625b2b63dafa6acd1d964e2950d24a40f3b6abbc1ed8f21c5c4a81c3d229931faf1577167b3ce168a49ad059c6381bb9d7aecb1006cfec9642c0c7fbbde0d2b54a7f14ce4e5fbd5e0f2032115a25d6b45bb1f9ca4a1a428ed73244520eade6a5d968d6b01bbbfbd287c0f53d0d99d26efa6ebad270d04842ba1a294625a63e9aef8e18622b56a34abad4362a6a8300884d033ad95c0b42c86608d4fcccd925c8d31d8e872d8fc053902b7be10fa6bbbffb2869552c370517b10ffb5ecc3082374ad125fa8a080ddec37ec2493edb208cb11668e1239ae5a55e54a4775735d6d451a1f436e8b6aafd124e5edfa130cd67fdaebb25114846469bb4ce4ef4c131d4dd9ae9347c4bd152c3ec3044e2e8774a6fb84a5d7d93d0b551dc0be0e5c16a2a7a67d1629d8f0bc7fcae7bbff3333a47496c6800ed5e95fd719ec024535ca1c6d39db4c1e81b0a6c6e43ad21177c4f608300b6fae97260719be92eb9a6ae1031d2a66ada7118db3c60a1d7d9194ab60c953b7d17a100f13e713505fd8cb71fdec2958071fb17ab1f7574dc160f6a23a0fec85c65d7a44d0a82f3f1a40b1576d96880838defd66db419ca8ba08d2ce7d18f967e250e649e756bcac2de0397d9ea1cec8c64e06188036eac00a8857f2e1fd2b353462d82777344a28d4619459ac0ddc2d74aba234521719ae93197a819e405366d3318ef1ed647a2042d434a58b49dc5290a9266c741a0e0497be80acbc407a01b99d9b11506f16024ed01c816ccffbe22a1a2b02b546e103538232e3f7e6f77cf08cd4e5acc397e408aad8b7e3dfc4a485d02dd4073cd4120f75924b2e94a4c4be754880e64b84f466015d0c7a1bbbe6491e5443f7e17ea127f9be0ef13e87e5279b363352786e275b9f2ac6a55220c41f844826995c9519ecc259860f78d9da58731d7bdfdd03d608a06e22f6e200386aab595025c3ac5054bc9e1d9d29b525adda8325534e65e2c9a5e63d2c13a664689e10a47163660f7c067e606c458d7cefd4528a4421d87f2265eb41a1d9dfb257eacd0cd22477adce7c919cdd7c4189c33460cebbb2a4697b61acd70fd0183bd8ab2e932aef1b39303d40f0a53dcf71a5531977e88519c4f15bc7a3216a53d9aa5a1e78fd875b3b953c82244c7d3689f463c886589a912978c7dfa02811063aeb7bf684b7d0a884df1bb6ae37beca77f59955923dc389b9015b89af990742370c83325dad240f88439589d2b376a060be225b609815a13caf840f61b698bc9e0f008bf2b31d602a268fd3cf3a3b19a1d2f46ea8fdb348975e228d76f4495426f9d923c441c417d6e77f64642b27ed70e601d16069e45598eabe9da23ac78f62ccbf6836ec5e6be2735e5047067fcb77df78ad238c85b3c6e847787b4c969d949ba14f03819b6f9adf190726508e5fa50fd22f9eb5016391ee80d4ff3266857a68c09a3b0f585b5f724e2f29ef0937fa8cbff515eae79b491a6abadf92740696c0ab6c9aadd245244c494ea8a04d9f883c828196ad48b0309c2a952f3228abab3496981b9d72492442f3497ee07c77d96c796ce4e832f0eb5914c142f814105b201c06c9ac4cc82178810846f01308fcd5a79483cdc3275d585f16f5a1ae58ca7ae92511a77918f5bee2670747ae14ac2be3e537b54a0168d4fe46b6afffdf9e7100c976e5d2c5570df06ebb0a980e139b415a0910c6b87ed8448cdf80e60e368e3b45c942e8857c91a9cd8fe1c2adb7fd02f3baaf5b85c6819d24f5992743eafc289e4680219fa08841ce88f42670f608b91c2ee08571773b4e3cfe0851c6c950682354616251b84e8d9e7129e78b3354ebe6ee89743a2504598b5b3d956da0999d64677950f7185098ca26241ff0f66b1235b0bb86516889388af0817ffff772098f54bb24f57fac2dc673ac73b26fdf946553cd41dcc585efca584ef8b750849a0d97d4046b21289a056780c786b6af3a93ee4fc610b97c3f242ab144edb356f420910b29ffbd9adb836373d8374d2e436f7dab38a291bc9e8290194de8002722689c085ecfe1848bad7e747977d538c692073a6e8bc7b397a007c34dd01a96ce9f072e1f4ffc1361163f552146cc59ea9cdddee3243501a10a83279d61bcb789f5a6d71085ab56546d5f31b3c815df6ad19cfac8b9fdc216b8c3d2494c6ad02b7e5df3f85c59f79fb26726f5c1adcb21c98d38b6fa3c77ec30d838b84a57f2bc22d34cf556ad8354a092db080c4d1946c1f0ec2d16df60c81316bcc2b48c97bb15b74c2b213182905edb7ee1240ecaa2a744561eb6e400802df9d932ee1b307acf74ac29a04e13b518ba6186f344107ab0f77f6f4d858be37997db865e46611bd441c095ea5c03cae7c47751cc2936d88acdd9bb599be72f0bb68c1f836ce3c65f0deff55de584051d620d91275479940651cef94928f646cea69285d597f23e903f53028f0348bcde911bcc49a5c22b516ccb567da85b2a57b8edaeebc1b67efb4457f7d9e31768a852313c498ca09dc1abf1d9785aaa9d0b1c5f11513a15a8e1b66ec020c7ee30d2c25be05ce8ab2a358e24ac76349d837f334d342c50e910eb0b75bd338ce5447b119be570485ae577d22fd1bcd84ba84a3ab91ef30875b88d41128ccd9f202e51083d2db8bc45b3eaf63dbea25c7fbe8e662c45ab7577eef608a7a8d705719ef156e065654306166959e9e64ea5a79f11564fcf268ce175e1294876889d1d550a9eb7cb7dc95897cc90c712fd74948ebb694476493f33c52d45f2cf3b05c9ada3b7293f8e6301481a2d4ecbbae3d44f5e6b5bc4e1abef872cda55391b72c3fcad4e6d183b84d2852cdf0663bc0c426de68fd5087f9f99e2bd5d95ca131783df8dca9025fb190426fca77cfa88968299f9c19f1a3c71ae0839c909c0bbfde6581b7f96d6e68a01a8af1b25f987d35e8e3895102bfbf3b64b3264ae73a88a96b3c2d5549301853a86eecaef9af2342ef0c8a2affca227d14f8c4fe2b57d122cb8077ced8233d27347548709cb8990b6d9f22451899788e8c411ddee99179afc3225b45beef37697417b2ebfa1e44ef2a2772a0f2bbd570029eab54e4094d1fa4731ec5e5c1c3fd3a265ce565e55e866316cc7606b5814846e4f19bbe8448004f269394a698514e1da0a8364a8b43b85f6a77ce9185abeded1bdc656ef1ace99ed09c0f24f08f2259f7eab4aa3bfa6553c9389d5cc5e9ca0a7c7ed74f1c0bfd729325de0a132b57824af9619ee66fa478e951ae91492dfe06333ec9cdadf0d9b9ffc0653c66fb505b55908c352e9b244b4fead046b6ed8c891e7031db5fdd08f3c1f536159d1be1e08b7fdba2b1c03b4ed6cb0833f55b80436ca45c1c87e0a9dd742fadef98942c493fa7d295b1028af37d5668d3ebc497b54fdc248299278c0889c4d04ad7243b31d53358965ceb41e7b6573e9883edc86824cf0ecf32eca936db312107f73173d78fb1a870a18df7a4481ea0b516492f760e3775a24fe7617b839a9f419279ec86e648cd75e45c43e9358967ff5defd02d7e3b12c3cae25d9774d87e24e5c61d5472aa6ada594c16daa43598f18dbea6707c9c621d341dcfc5fda4a555295b6346c388e007265554d929376d32ae1667ba569a16654f330a8ea46bf5978779328fa90", 0x1000}, {&(0x7f00000004c0)="beb45cfa0b58cb34725e3c318faf41dec5acaef2036cc53ff0405ef571ee67dac13f3d75ccf55ce1f96aa0db654dc8cd42a0e242b8fdd57f5959de00de473f495e00a39799e2141b6a374bfe5c043de459f680cab76b3c", 0x57}, {&(0x7f00000015c0)="f12a6f23bcd0fdf107f91dac7900a1288ee58201a931ef6468e150b907ea0d7962744c3b8bdf275cba5c10630fb2a74567c9c7decf041d459881c06e6c3f24d7d94ce8ed43e3b4b44f09dc8b338ca10f62d94b5326eef941f66448b484726c753e7d06a353108aa0c750a15db29fa65c8abffc79e641778f099e97a2b5ac58af8ccdd51f2576bba80e68263bb6ad671a258385f37744f26948b7ccdddf593ec3418528ce4a1a9079274f672fd7b3365564e5c1e772d22557a266bafda7", 0xbd}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="aba4ad83d611ea1dac7468fe736baec8371c7877f6fddc257684923d93cbd8f5c984651a6984eede89ee80436cbd3238026128280a7d6bcf2db47c6a9d2119077c81ed464a5d5e209d8ea790381e47b0896b", 0x52}, {&(0x7f0000002700)="1f0523b3325e36cfa7f3a62535102c5104f518d41e92e6ed812b71e4ea4581adaf4dc704e1209bf51253c1dfffa071bca5385bdebbf105dea9a1d90b4aa977a51e6fbc2f6c87551c32f08080b347b6491342e0b37937dbdbe1ecdbae34368f794672fb0281aabf1908ec0580ec25459546d6a9b539e6e5", 0x77}], 0xa, &(0x7f00000028c0)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r3, r4, r5, r0, r7]}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r8]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r9, 0xffffffffffffffff, r11}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee01}}}], 0xac, 0x1}, 0x20004040) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 23:06:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xbd, 0xc8, 0x7e}}}, 0x6) [ 311.913206][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:06:22 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, '\x00\x00\b'}, {@none, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) 23:06:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000001200)) (async) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0xfffd, 0x9, 0x3, 0x8000}) 23:06:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xbd, 0xc8, 0x7e}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xbd, 0xc8, 0x7e}}}, 0x6) (async) 23:06:22 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@any, 0x81, 0x6, "5a250e", 0x9, 0x9}, {@any, 0x91, 0x8, "ac21c8", 0x800, 0x20}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0xfe00}}}}, 0xf) [ 311.961890][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 311.977818][ T143] usbhid 4-1:0.0: can't add hid device: -71 [ 311.984080][ T3653] Bluetooth: Wrong link type (-71) [ 311.990208][ T143] usbhid: probe of 4-1:0.0 failed with error -71 23:06:22 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@any, 0x81, 0x6, "5a250e", 0x9, 0x9}, {@any, 0x91, 0x8, "ac21c8", 0x800, 0x20}]}}}, 0x20) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0xfe00}}}}, 0xf) [ 312.062161][ T3653] Bluetooth: Wrong link type (-71) [ 312.067679][ T3653] Bluetooth: hci1: link tx timeout [ 312.073130][ T3653] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 312.081886][ T3653] Bluetooth: hci1: link tx timeout [ 312.087042][ T3653] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 312.096850][ T143] usb 4-1: USB disconnect, device number 52 [ 312.097269][ T3653] Bluetooth: hci1: wrong event for mode 0 23:06:22 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xed}, "c6aff6d676ea81e0b83c280f549f87261faf31a803f9920f07b85aba6ca693752f6581d7090a27bb85d4ff93525de672aa429788ea1affcc82944383b5fbc711088b3712e71287c66ab2a154d0fbb8b119c6356f61b5ca1e516ea768674d5ce8c8b283753651b406c82aae975071d76577d7fc47b112232cec0e49c9227af9439f6f83cd20bb17d5166d6a79d8201ecea3730000314ed10c5cc6079534700c1da90e1eb39c54771f4ce9e1890e25ed5cdffaed66e30c90d1c1809af451c874a34d942a68f4b44c15d034dccacf7f08841b52d05c8e7da67bdc65d16841809e3dda47995412818969bbbf6e29b6"}, 0xf1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0xca, 0xc9, {0x3, 0x494, 0x0, 0x61, 0x80000000}}}}, 0x17) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xf) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x80, 0xc8, 0x3}}}, 0x7) [ 312.151096][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.157151][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.163816][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.175688][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.181625][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.187813][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.193616][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199518][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199569][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199616][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199663][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199712][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199760][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199807][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199853][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199910][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.199963][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200014][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200060][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200105][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200150][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200192][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200237][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200276][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200323][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200369][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200416][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200465][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200511][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200557][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200603][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200654][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200702][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200765][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200816][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200880][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.200934][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.277393][ T3655] Bluetooth: hci5: ISO packet for unknown connection handle 3840 [ 312.288041][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.387615][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.393416][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.399345][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.405143][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.411071][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.417085][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.422990][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.429030][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.434817][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.440734][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.446531][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.452404][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.458340][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.464128][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.470057][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.475849][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.481731][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.487575][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.497340][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.503141][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.509207][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.515828][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.521745][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.527762][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.533661][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.544036][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.547354][ T143] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 312.549939][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 312.563171][ T3653] Bluetooth: Wrong link type (-71) [ 312.568512][ T3653] Bluetooth: hci1: link tx timeout [ 312.573650][ T3653] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 312.581429][ T3653] Bluetooth: hci1: link tx timeout [ 312.586554][ T3653] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 312.947435][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.958557][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.968840][ T143] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 312.978257][ T143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.993751][ T143] usb 4-1: config 0 descriptor?? [ 313.737409][ T143] usbhid 4-1:0.0: can't add hid device: -71 [ 313.743443][ T143] usbhid: probe of 4-1:0.0 failed with error -71 [ 313.753135][ T143] usb 4-1: USB disconnect, device number 53 23:06:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xb, "ce9c"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xb, "ce9c"}]}}, 0x0}, 0x0) (async) 23:06:24 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xbd, 0xc8, 0x7e}}}, 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xbd, 0xc8, 0x7e}}}, 0x6) (async) 23:06:24 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd6}, "db2343c52468233b48d7ac3ec31646955312bf0e3278dd75a7201e3597f65c1404b6d2b05d8f59f42f02e6d01da71319ce677f723d1282980520ababee61df78851fc5467e82b94153d7d3760f8e78e2fc2ed35b13917ed01d04fbd257ada390d49941f2c90a0c7d3e4357a64ddb41eadcd011cd580244c62447817aaec7a013893ffb06e1d16976fc5204090bb81b4d18c98fb6ee2d672a8f5cb9d03afe3dbd40b9390267c1a7b8285fea5bd359b2d9076fe5ba66a9f278f61cc6aff5d5ef6491725d99908c0f3789bd8212c6debc576eb7041b27f9"}, 0xda) 23:06:24 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xed}, "c6aff6d676ea81e0b83c280f549f87261faf31a803f9920f07b85aba6ca693752f6581d7090a27bb85d4ff93525de672aa429788ea1affcc82944383b5fbc711088b3712e71287c66ab2a154d0fbb8b119c6356f61b5ca1e516ea768674d5ce8c8b283753651b406c82aae975071d76577d7fc47b112232cec0e49c9227af9439f6f83cd20bb17d5166d6a79d8201ecea3730000314ed10c5cc6079534700c1da90e1eb39c54771f4ce9e1890e25ed5cdffaed66e30c90d1c1809af451c874a34d942a68f4b44c15d034dccacf7f08841b52d05c8e7da67bdc65d16841809e3dda47995412818969bbbf6e29b6"}, 0xf1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0xca, 0xc9, {0x3, 0x494, 0x0, 0x61, 0x80000000}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xf) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x80, 0xc8, 0x3}}}, 0x7) 23:06:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xbd, 0xc8, 0x7e}}}, 0x6) 23:06:24 executing program 5: r0 = socket(0x11, 0xa, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = openat$ptmx(0xffffff9c, &(0x7f0000000540), 0x52040, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002800)='syz1\x00', 0x200002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$tcp_mem(0xffffff9c, &(0x7f0000002840)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r9 = getpid() r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r11]) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002880)=0x0) sendmsg$unix(r1, &(0x7f0000002980)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000000240)="7637970af357a880178be9745c31892581713185199cf38f396d9a75bc5d3c4282a28f06f4178435d26f245d9ff79f1b74e88587ef113033f078fb28cf3415bfbe940746f1af7110cb5da5282889db3647e9fedb9132fd21bb12e25da1053f90e7132347283ec6d86f0bdd0bb5babef224bea4716760c77c5a09529a6cb974ce337c656f0f898d4debc4ad5f3b4c13b3635156b94210fd7bf265f427e47d976a6076b13b44994b4e0214ca374aa6e9ad44b777af876674ffab924aed65092090b251b52b685d8e52e4f8d7a890087d361ce4cefc6399d8ac52b184", 0xdb}, {&(0x7f0000000140)}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000180)="cab80817ee5d2850ebd2f583a5169cff83136d250adf63521fdc99d30be1656bf643370dcbc0e819627191ac277cd834db0ed11d4675253b6864154081a952b5f30cc98b8d3d79db30136b32dfb0f0150433673f8b0f164196f5a454ddbd2dc88c", 0x61}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000004c0)="beb45cfa0b58cb34725e3c318faf41dec5acaef2036cc53ff0405ef571ee67dac13f3d75ccf55ce1f96aa0db654dc8cd42a0e242b8fdd57f5959de00de473f495e00a39799e2141b6a374bfe5c043de459f680cab76b3c", 0x57}, {&(0x7f00000015c0)="f12a6f23bcd0fdf107f91dac7900a1288ee58201a931ef6468e150b907ea0d7962744c3b8bdf275cba5c10630fb2a74567c9c7decf041d459881c06e6c3f24d7d94ce8ed43e3b4b44f09dc8b338ca10f62d94b5326eef941f66448b484726c753e7d06a353108aa0c750a15db29fa65c8abffc79e641778f099e97a2b5ac58af8ccdd51f2576bba80e68263bb6ad671a258385f37744f26948b7ccdddf593ec3418528ce4a1a9079274f672fd7b3365564e5c1e772d22557a266bafda7", 0xbd}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="aba4ad83d611ea1dac7468fe736baec8371c7877f6fddc257684923d93cbd8f5c984651a6984eede89ee80436cbd3238026128280a7d6bcf2db47c6a9d2119077c81ed464a5d5e209d8ea790381e47b0896b", 0x52}, {&(0x7f0000002700)="1f0523b3325e36cfa7f3a62535102c5104f518d41e92e6ed812b71e4ea4581adaf4dc704e1209bf51253c1dfffa071bca5385bdebbf105dea9a1d90b4aa977a51e6fbc2f6c87551c32f08080b347b6491342e0b37937dbdbe1ecdbae34368f794672fb0281aabf1908ec0580ec25459546d6a9b539e6e5", 0x77}], 0xa, &(0x7f00000028c0)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r3, r4, r5, r0, r7]}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r8]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r9, 0xffffffffffffffff, r11}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee01}}}], 0xac, 0x1}, 0x20004040) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) socket(0x11, 0xa, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) openat$ptmx(0xffffff9c, &(0x7f0000000540), 0x52040, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000002800)='syz1\x00', 0x200002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) openat$tcp_mem(0xffffff9c, &(0x7f0000002840)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) getpid() (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r11]) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002880)) (async) sendmsg$unix(r1, &(0x7f0000002980)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000000240)="7637970af357a880178be9745c31892581713185199cf38f396d9a75bc5d3c4282a28f06f4178435d26f245d9ff79f1b74e88587ef113033f078fb28cf3415bfbe940746f1af7110cb5da5282889db3647e9fedb9132fd21bb12e25da1053f90e7132347283ec6d86f0bdd0bb5babef224bea4716760c77c5a09529a6cb974ce337c656f0f898d4debc4ad5f3b4c13b3635156b94210fd7bf265f427e47d976a6076b13b44994b4e0214ca374aa6e9ad44b777af876674ffab924aed65092090b251b52b685d8e52e4f8d7a890087d361ce4cefc6399d8ac52b184", 0xdb}, {&(0x7f0000000140)}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000180)="cab80817ee5d2850ebd2f583a5169cff83136d250adf63521fdc99d30be1656bf643370dcbc0e819627191ac277cd834db0ed11d4675253b6864154081a952b5f30cc98b8d3d79db30136b32dfb0f0150433673f8b0f164196f5a454ddbd2dc88c", 0x61}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000004c0)="beb45cfa0b58cb34725e3c318faf41dec5acaef2036cc53ff0405ef571ee67dac13f3d75ccf55ce1f96aa0db654dc8cd42a0e242b8fdd57f5959de00de473f495e00a39799e2141b6a374bfe5c043de459f680cab76b3c", 0x57}, {&(0x7f00000015c0)="f12a6f23bcd0fdf107f91dac7900a1288ee58201a931ef6468e150b907ea0d7962744c3b8bdf275cba5c10630fb2a74567c9c7decf041d459881c06e6c3f24d7d94ce8ed43e3b4b44f09dc8b338ca10f62d94b5326eef941f66448b484726c753e7d06a353108aa0c750a15db29fa65c8abffc79e641778f099e97a2b5ac58af8ccdd51f2576bba80e68263bb6ad671a258385f37744f26948b7ccdddf593ec3418528ce4a1a9079274f672fd7b3365564e5c1e772d22557a266bafda7", 0xbd}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="aba4ad83d611ea1dac7468fe736baec8371c7877f6fddc257684923d93cbd8f5c984651a6984eede89ee80436cbd3238026128280a7d6bcf2db47c6a9d2119077c81ed464a5d5e209d8ea790381e47b0896b", 0x52}, {&(0x7f0000002700)="1f0523b3325e36cfa7f3a62535102c5104f518d41e92e6ed812b71e4ea4581adaf4dc704e1209bf51253c1dfffa071bca5385bdebbf105dea9a1d90b4aa977a51e6fbc2f6c87551c32f08080b347b6491342e0b37937dbdbe1ecdbae34368f794672fb0281aabf1908ec0580ec25459546d6a9b539e6e5", 0x77}], 0xa, &(0x7f00000028c0)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r3, r4, r5, r0, r7]}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r8]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r9, 0xffffffffffffffff, r11}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee01}}}], 0xac, 0x1}, 0x20004040) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) (async) 23:06:24 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xed}, "c6aff6d676ea81e0b83c280f549f87261faf31a803f9920f07b85aba6ca693752f6581d7090a27bb85d4ff93525de672aa429788ea1affcc82944383b5fbc711088b3712e71287c66ab2a154d0fbb8b119c6356f61b5ca1e516ea768674d5ce8c8b283753651b406c82aae975071d76577d7fc47b112232cec0e49c9227af9439f6f83cd20bb17d5166d6a79d8201ecea3730000314ed10c5cc6079534700c1da90e1eb39c54771f4ce9e1890e25ed5cdffaed66e30c90d1c1809af451c874a34d942a68f4b44c15d034dccacf7f08841b52d05c8e7da67bdc65d16841809e3dda47995412818969bbbf6e29b6"}, 0xf1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0xca, 0xc9, {0x3, 0x494, 0x0, 0x61, 0x80000000}}}}, 0x17) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xf) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x80, 0xc8, 0x3}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="05000f47cabaea211b85c0db0000000000000000006dc1a1868609b0d0659aca9175e64710b8174673cd1567921c1cdf77469ff5347b6b6f25dafc3062745b710d2f6b720356477fb8259b7a126c635ae0e07d9b084860ac9fab4ad92cc937dc5b9bff41b851473f313ea55c6efbf58b05b90ed9e63e47ec77c7e947dc823d7a13f74c31c7f3698b8ec3492860d739693a06a6cd4052395a0de546ea4b3c6c79555cd398500ed4e93fac3e7eec06737d1989ea17742e39fef3ca4b7a99b4f09e14e2f066b47efc8bb6be83ca8087efc6a25420ef5d73d3034ac8b1bfc28343220d9a95699400ead4d4b60a5c4ac978925f3e3d0404e181de560f1edc324e83546556cf7b910100000001000000028bca32594d7b8dc82889e5db2422cf90259cc27055bc94209be3bbdc235751a45a1f78cd0117ed5eaefa942e8e9727d4de91398aea4e4eab17cd31c3e0eb794e9b953071932913c7b4825c57d585f31ff2e5760f096d12bc3a0f50268bfe3e6041e614093abf6b8e19a7695b55bb0b62344be7cd15bfdf4e886ae97a47c0efb1e519da77904958412b3860ba28590ea0d901b865919437e7d1fe37c47fc4f6ac4b0de8795e05b9fa58ce8ed775daf80d34054cd7459a2e084b6607c970142960d5e09d395f4ba8e24762270f5d4abb2e28574e2272812949c602d70be9363bf0945e00ee7135f4fb4caa7d8f9113963e7d510328d1aa490dbd0452f04bebf68e94ddc82ba932e71066382195a83aa20f56367196f2bbd023dd5c528b80f6bed72b05350d042047578931d6e8044d7872e379e21d4ec0748f826734f38a26210e71d1f52f80f79943bfc168ab97fb86c3ef3ffa21528c51f16345cde2a7727ec984c96aedfa1ca7eab063972d93c15f850bc33c3639a76b7dab936cc10ab87b51a2c5d5e2bf316a376119a8cfeeb5b0262eebc0e168e8871849a5dd587d7ec3543ca1d8761028743e767308224ee15a3008f8127b81c64d873ea6e52be1195488d3801fcde7c2b0e3b4272377bfd61c8a293411ad3d8ea639204555f25ad7e46f1ec66c3113d936a84652b9958eb3b6c3df5b01540e619367ce4ff5454051d51a82a05f9ebe3a3f49f792d809fba8e50c5adea641be081d2dda424eeb4589f62e426b7019fd9ff8ded2c86c8ad8621263a4f555174a281725a692fe358d06227cab00670da10fe8c79f0e03b9327b51b3d9b9d94ea98ed4cbe61ebc4871d0dd6b149690f6de7ec38a80e4fdce82d1bf13911d16e79145d2680714028901b43883b14f305ac69aa8f443bc97a3370c7d0371b4015acefd285213ef15b88e137ac79f16d7520e8848b03373b06789c48b5db41ddeb61135545466c47a69843d021a410f7eccdc8a5b45707cb8ea0e7c007e4c6978be71d72cfdc54ac007a67d173859856002d0c8d55f5ac75cec365d276a20385e0a1fce77a538ec438ab0ff5c491d2408baecf817068c66eb64900252ac3500b71f86908ee39b27e8bfe1a9d355c01453a7c2a4e3c600000000"], 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xed}, "c6aff6d676ea81e0b83c280f549f87261faf31a803f9920f07b85aba6ca693752f6581d7090a27bb85d4ff93525de672aa429788ea1affcc82944383b5fbc711088b3712e71287c66ab2a154d0fbb8b119c6356f61b5ca1e516ea768674d5ce8c8b283753651b406c82aae975071d76577d7fc47b112232cec0e49c9227af9439f6f83cd20bb17d5166d6a79d8201ecea3730000314ed10c5cc6079534700c1da90e1eb39c54771f4ce9e1890e25ed5cdffaed66e30c90d1c1809af451c874a34d942a68f4b44c15d034dccacf7f08841b52d05c8e7da67bdc65d16841809e3dda47995412818969bbbf6e29b6"}, 0xf1) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0xca, 0xc9, {0x3, 0x494, 0x0, 0x61, 0x80000000}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xf) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x80, 0xc8, 0x3}}}, 0x7) (async) 23:06:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x6000) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="a6602862f344d07863a4ad2b1892df25135d74f15dc4ff44cc6fb662088e5c034d38ef3527ad4f5a93a61d70750cfd7a1a3866e06788e9113d92a2cbb7fc8b977e8a9c4e10f04077cc295406d598c07932401a1bc18928b35eca07ef926def810ece077649fc93e22baf911b9d02b1929a13634f052640ba9e2f2fb1ba7b35680a6d77a4bf86c83a89fbb873d260c55029c305897f9430d20b1d613842ef98", 0x9f}, {&(0x7f0000000140)="58b66a2b65a9080b2eab24d06e75b51556bcdb3500adc6ff3b9eb30e1602f2560803515c061d647eae47053ea93b32d81927fdb5e5405c1a1328b78777ca57e65dc760043ca6f6d53832341dba98f0a4fb27156ace461bd5173b63c0ca68dadd67fb8c64c718e868d99f9d8aacf56dd135e9372c2e066f0490b2b7a50a974c8226f0b1d1cc71752432405bb9f679244991c44463dd4e103e807ea0d0726a36d5ce313490386d231aca0320b4c04027cb52f84e291d393d9f5a3a7142f56867fcebd93461a7d719a344bb95be72df6151b1589a2ae3b4b4228101aca29d69d4cf3e74108e", 0xe4}, {&(0x7f0000000240)="1b0c262b102cd59136acfeecb11feac5c6a6a7faff173eb9cf3a10eeae5582021c6772e21f602413d953cde8438949d01c7b9c2dfa5fa78496dc8425c7e5fb490c5c54e2f7370ad160a9c810730da08fe13e781548d81a224a5b2800da83ded40c1f89c5bf462b56cff0d596702eb35f21e12dc837ddb9a61905480434cbc2474cf5f14a27d39c7387d7ed420c3f335423d0ee47f07681ec9f5a4ef5194c9ee5183f201e8f8cf263692246b9ef60f5a0a65f4485d498f6b1d031a943bfbc7beacf74d1cd6bcaedb87c69439c826b57177d922821125367a1502e463c1fa181ddebca73cc516809c6dbed489d33a57346d0054d49f2c1bf18", 0xf8}, {&(0x7f0000000340)="06e985775bd192f70da91cb7a13bb0a5fcf9a004839ae7c323b6a8aa5f2d85bdef2d28ec1419cd7b3fba79497ed3ebfb991761b34c090cfae0d2a06ef21b509cca7b26b5f86237189edf8cfabbe8e5e1ab6582842b79be17d0185f42784905694ed9ad969b485410d9db9801dd27d3dabd31ad8ffc354562785d556410ae855b00fc1a37be8ecd06fd36ad92cefdd6e07e05e191c283eba8ff6029c5f27b8b294a4929a3b1026bd52cf02ca95905c75703da5aa9b8f940f6a79659e4d8c131834bf59557cbd9d89462406c899badf747131106d751010bd892", 0xd9}, {&(0x7f0000000440)="ca1f77f5a8639a53c0f11c2fb3ce07c038d63a65736b2610856d9d8218d6e8b58ceccc9f1a69a51b9779116106406be609a916cb3ce33896b5db4f32c77f13528d706ce4353567c41f4e9d0877e3f7cf76b226d4e70d66668b6f543fbd3523e0466aad1f5d41ee7b5691c5a1b853b102bfa473eac7ad2fdad77a63e4ba3c4861c9f95cf57072577aa037a0e928fdedf0792448f11a6ec4725d41ef4e10f01952d11838c2", 0xa4}, {&(0x7f0000000500)="afac63a72881d881693e637b6d9e8a45eb54392afb005dde3228ab81fba863012b9d1fd8cd9f376bfa269c449c9c57e9b984ef7a811d040b4ef3b42ec83287b92eb6d88206b6eec1afb3c896c8f479a9f478ac06a1cc3ff913a3a1f5fc7bded44e2446f355006534472ca20dba01e796ef7790df64202a4ff36092252f7fbf090b29c58dbc11a5c84c1faf33858e7a5f46c1f7bd97359f361db63a53598bf85f23652aad1c9e926dcccef6b30866a08c7e41b177", 0xb4}, {&(0x7f00000005c0)="4a9820a4f963f3888e445156e22091263fe9bc34b34a5302b5354b5cde0f937a12ca53467d79d44d248aac6a71718dd7f3ea9c799e59ee1076db1487fbc39fd0a84d1efee2371f425ad88c2bbc2e0989399825bd14d2daeac600b9b85e88fa224674848e0045e8c4403e4d8b52c9da8d57991a0d8c2c612ae82ca45b37a9e6ff79e3432b0592754aee8401d900535cb606e975c78febfadf16b563fb3bfa630b53d25d392497c50eb0678346b304d879d1c8107a8273015c6f97d10feff2b6292b26c2b7cc57032b8b47f1", 0xcb}], 0x7, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:24 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd6}, "db2343c52468233b48d7ac3ec31646955312bf0e3278dd75a7201e3597f65c1404b6d2b05d8f59f42f02e6d01da71319ce677f723d1282980520ababee61df78851fc5467e82b94153d7d3760f8e78e2fc2ed35b13917ed01d04fbd257ada390d49941f2c90a0c7d3e4357a64ddb41eadcd011cd580244c62447817aaec7a013893ffb06e1d16976fc5204090bb81b4d18c98fb6ee2d672a8f5cb9d03afe3dbd40b9390267c1a7b8285fea5bd359b2d9076fe5ba66a9f278f61cc6aff5d5ef6491725d99908c0f3789bd8212c6debc576eb7041b27f9"}, 0xda) [ 314.224003][ T3653] Bluetooth: hci5: ISO packet for unknown connection handle 3840 23:06:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xbd, 0xc8, 0x7e}}}, 0x6) 23:06:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x6000) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="a6602862f344d07863a4ad2b1892df25135d74f15dc4ff44cc6fb662088e5c034d38ef3527ad4f5a93a61d70750cfd7a1a3866e06788e9113d92a2cbb7fc8b977e8a9c4e10f04077cc295406d598c07932401a1bc18928b35eca07ef926def810ece077649fc93e22baf911b9d02b1929a13634f052640ba9e2f2fb1ba7b35680a6d77a4bf86c83a89fbb873d260c55029c305897f9430d20b1d613842ef98", 0x9f}, {&(0x7f0000000140)="58b66a2b65a9080b2eab24d06e75b51556bcdb3500adc6ff3b9eb30e1602f2560803515c061d647eae47053ea93b32d81927fdb5e5405c1a1328b78777ca57e65dc760043ca6f6d53832341dba98f0a4fb27156ace461bd5173b63c0ca68dadd67fb8c64c718e868d99f9d8aacf56dd135e9372c2e066f0490b2b7a50a974c8226f0b1d1cc71752432405bb9f679244991c44463dd4e103e807ea0d0726a36d5ce313490386d231aca0320b4c04027cb52f84e291d393d9f5a3a7142f56867fcebd93461a7d719a344bb95be72df6151b1589a2ae3b4b4228101aca29d69d4cf3e74108e", 0xe4}, {&(0x7f0000000240)="1b0c262b102cd59136acfeecb11feac5c6a6a7faff173eb9cf3a10eeae5582021c6772e21f602413d953cde8438949d01c7b9c2dfa5fa78496dc8425c7e5fb490c5c54e2f7370ad160a9c810730da08fe13e781548d81a224a5b2800da83ded40c1f89c5bf462b56cff0d596702eb35f21e12dc837ddb9a61905480434cbc2474cf5f14a27d39c7387d7ed420c3f335423d0ee47f07681ec9f5a4ef5194c9ee5183f201e8f8cf263692246b9ef60f5a0a65f4485d498f6b1d031a943bfbc7beacf74d1cd6bcaedb87c69439c826b57177d922821125367a1502e463c1fa181ddebca73cc516809c6dbed489d33a57346d0054d49f2c1bf18", 0xf8}, {&(0x7f0000000340)="06e985775bd192f70da91cb7a13bb0a5fcf9a004839ae7c323b6a8aa5f2d85bdef2d28ec1419cd7b3fba79497ed3ebfb991761b34c090cfae0d2a06ef21b509cca7b26b5f86237189edf8cfabbe8e5e1ab6582842b79be17d0185f42784905694ed9ad969b485410d9db9801dd27d3dabd31ad8ffc354562785d556410ae855b00fc1a37be8ecd06fd36ad92cefdd6e07e05e191c283eba8ff6029c5f27b8b294a4929a3b1026bd52cf02ca95905c75703da5aa9b8f940f6a79659e4d8c131834bf59557cbd9d89462406c899badf747131106d751010bd892", 0xd9}, {&(0x7f0000000440)="ca1f77f5a8639a53c0f11c2fb3ce07c038d63a65736b2610856d9d8218d6e8b58ceccc9f1a69a51b9779116106406be609a916cb3ce33896b5db4f32c77f13528d706ce4353567c41f4e9d0877e3f7cf76b226d4e70d66668b6f543fbd3523e0466aad1f5d41ee7b5691c5a1b853b102bfa473eac7ad2fdad77a63e4ba3c4861c9f95cf57072577aa037a0e928fdedf0792448f11a6ec4725d41ef4e10f01952d11838c2", 0xa4}, {&(0x7f0000000500)="afac63a72881d881693e637b6d9e8a45eb54392afb005dde3228ab81fba863012b9d1fd8cd9f376bfa269c449c9c57e9b984ef7a811d040b4ef3b42ec83287b92eb6d88206b6eec1afb3c896c8f479a9f478ac06a1cc3ff913a3a1f5fc7bded44e2446f355006534472ca20dba01e796ef7790df64202a4ff36092252f7fbf090b29c58dbc11a5c84c1faf33858e7a5f46c1f7bd97359f361db63a53598bf85f23652aad1c9e926dcccef6b30866a08c7e41b177", 0xb4}, {&(0x7f00000005c0)="4a9820a4f963f3888e445156e22091263fe9bc34b34a5302b5354b5cde0f937a12ca53467d79d44d248aac6a71718dd7f3ea9c799e59ee1076db1487fbc39fd0a84d1efee2371f425ad88c2bbc2e0989399825bd14d2daeac600b9b85e88fa224674848e0045e8c4403e4d8b52c9da8d57991a0d8c2c612ae82ca45b37a9e6ff79e3432b0592754aee8401d900535cb606e975c78febfadf16b563fb3bfa630b53d25d392497c50eb0678346b304d879d1c8107a8273015c6f97d10feff2b6292b26c2b7cc57032b8b47f1", 0xcb}], 0x7, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 314.330091][ T3653] Bluetooth: hci5: ISO packet for unknown connection handle 3840 23:06:24 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/214) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) [ 314.493629][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 314.547346][ T143] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 314.917688][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.928688][ T143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.938817][ T143] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 314.948139][ T143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.960057][ T143] usb 4-1: config 0 descriptor?? [ 315.641537][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.651366][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.887375][ T143] usbhid 4-1:0.0: can't add hid device: -71 [ 315.893388][ T143] usbhid: probe of 4-1:0.0 failed with error -71 [ 315.905465][ T143] usb 4-1: USB disconnect, device number 54 23:06:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xb, "ce9c"}]}}, 0x0}, 0x0) 23:06:26 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0xbd, 0xc8, 0x7e}}}, 0x6) 23:06:26 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd6}, "db2343c52468233b48d7ac3ec31646955312bf0e3278dd75a7201e3597f65c1404b6d2b05d8f59f42f02e6d01da71319ce677f723d1282980520ababee61df78851fc5467e82b94153d7d3760f8e78e2fc2ed35b13917ed01d04fbd257ada390d49941f2c90a0c7d3e4357a64ddb41eadcd011cd580244c62447817aaec7a013893ffb06e1d16976fc5204090bb81b4d18c98fb6ee2d672a8f5cb9d03afe3dbd40b9390267c1a7b8285fea5bd359b2d9076fe5ba66a9f278f61cc6aff5d5ef6491725d99908c0f3789bd8212c6debc576eb7041b27f9"}, 0xda) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd6}, "db2343c52468233b48d7ac3ec31646955312bf0e3278dd75a7201e3597f65c1404b6d2b05d8f59f42f02e6d01da71319ce677f723d1282980520ababee61df78851fc5467e82b94153d7d3760f8e78e2fc2ed35b13917ed01d04fbd257ada390d49941f2c90a0c7d3e4357a64ddb41eadcd011cd580244c62447817aaec7a013893ffb06e1d16976fc5204090bb81b4d18c98fb6ee2d672a8f5cb9d03afe3dbd40b9390267c1a7b8285fea5bd359b2d9076fe5ba66a9f278f61cc6aff5d5ef6491725d99908c0f3789bd8212c6debc576eb7041b27f9"}, 0xda) (async) 23:06:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x6000) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="a6602862f344d07863a4ad2b1892df25135d74f15dc4ff44cc6fb662088e5c034d38ef3527ad4f5a93a61d70750cfd7a1a3866e06788e9113d92a2cbb7fc8b977e8a9c4e10f04077cc295406d598c07932401a1bc18928b35eca07ef926def810ece077649fc93e22baf911b9d02b1929a13634f052640ba9e2f2fb1ba7b35680a6d77a4bf86c83a89fbb873d260c55029c305897f9430d20b1d613842ef98", 0x9f}, {&(0x7f0000000140)="58b66a2b65a9080b2eab24d06e75b51556bcdb3500adc6ff3b9eb30e1602f2560803515c061d647eae47053ea93b32d81927fdb5e5405c1a1328b78777ca57e65dc760043ca6f6d53832341dba98f0a4fb27156ace461bd5173b63c0ca68dadd67fb8c64c718e868d99f9d8aacf56dd135e9372c2e066f0490b2b7a50a974c8226f0b1d1cc71752432405bb9f679244991c44463dd4e103e807ea0d0726a36d5ce313490386d231aca0320b4c04027cb52f84e291d393d9f5a3a7142f56867fcebd93461a7d719a344bb95be72df6151b1589a2ae3b4b4228101aca29d69d4cf3e74108e", 0xe4}, {&(0x7f0000000240)="1b0c262b102cd59136acfeecb11feac5c6a6a7faff173eb9cf3a10eeae5582021c6772e21f602413d953cde8438949d01c7b9c2dfa5fa78496dc8425c7e5fb490c5c54e2f7370ad160a9c810730da08fe13e781548d81a224a5b2800da83ded40c1f89c5bf462b56cff0d596702eb35f21e12dc837ddb9a61905480434cbc2474cf5f14a27d39c7387d7ed420c3f335423d0ee47f07681ec9f5a4ef5194c9ee5183f201e8f8cf263692246b9ef60f5a0a65f4485d498f6b1d031a943bfbc7beacf74d1cd6bcaedb87c69439c826b57177d922821125367a1502e463c1fa181ddebca73cc516809c6dbed489d33a57346d0054d49f2c1bf18", 0xf8}, {&(0x7f0000000340)="06e985775bd192f70da91cb7a13bb0a5fcf9a004839ae7c323b6a8aa5f2d85bdef2d28ec1419cd7b3fba79497ed3ebfb991761b34c090cfae0d2a06ef21b509cca7b26b5f86237189edf8cfabbe8e5e1ab6582842b79be17d0185f42784905694ed9ad969b485410d9db9801dd27d3dabd31ad8ffc354562785d556410ae855b00fc1a37be8ecd06fd36ad92cefdd6e07e05e191c283eba8ff6029c5f27b8b294a4929a3b1026bd52cf02ca95905c75703da5aa9b8f940f6a79659e4d8c131834bf59557cbd9d89462406c899badf747131106d751010bd892", 0xd9}, {&(0x7f0000000440)="ca1f77f5a8639a53c0f11c2fb3ce07c038d63a65736b2610856d9d8218d6e8b58ceccc9f1a69a51b9779116106406be609a916cb3ce33896b5db4f32c77f13528d706ce4353567c41f4e9d0877e3f7cf76b226d4e70d66668b6f543fbd3523e0466aad1f5d41ee7b5691c5a1b853b102bfa473eac7ad2fdad77a63e4ba3c4861c9f95cf57072577aa037a0e928fdedf0792448f11a6ec4725d41ef4e10f01952d11838c2", 0xa4}, {&(0x7f0000000500)="afac63a72881d881693e637b6d9e8a45eb54392afb005dde3228ab81fba863012b9d1fd8cd9f376bfa269c449c9c57e9b984ef7a811d040b4ef3b42ec83287b92eb6d88206b6eec1afb3c896c8f479a9f478ac06a1cc3ff913a3a1f5fc7bded44e2446f355006534472ca20dba01e796ef7790df64202a4ff36092252f7fbf090b29c58dbc11a5c84c1faf33858e7a5f46c1f7bd97359f361db63a53598bf85f23652aad1c9e926dcccef6b30866a08c7e41b177", 0xb4}, {&(0x7f00000005c0)="4a9820a4f963f3888e445156e22091263fe9bc34b34a5302b5354b5cde0f937a12ca53467d79d44d248aac6a71718dd7f3ea9c799e59ee1076db1487fbc39fd0a84d1efee2371f425ad88c2bbc2e0989399825bd14d2daeac600b9b85e88fa224674848e0045e8c4403e4d8b52c9da8d57991a0d8c2c612ae82ca45b37a9e6ff79e3432b0592754aee8401d900535cb606e975c78febfadf16b563fb3bfa630b53d25d392497c50eb0678346b304d879d1c8107a8273015c6f97d10feff2b6292b26c2b7cc57032b8b47f1", 0xcb}], 0x7, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:26 executing program 5: r0 = socket(0x11, 0xa, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = openat$ptmx(0xffffff9c, &(0x7f0000000540), 0x52040, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002800)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$tcp_mem(0xffffff9c, &(0x7f0000002840)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r9 = getpid() (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r11]) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002880)=0x0) sendmsg$unix(r1, &(0x7f0000002980)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000000240)="7637970af357a880178be9745c31892581713185199cf38f396d9a75bc5d3c4282a28f06f4178435d26f245d9ff79f1b74e88587ef113033f078fb28cf3415bfbe940746f1af7110cb5da5282889db3647e9fedb9132fd21bb12e25da1053f90e7132347283ec6d86f0bdd0bb5babef224bea4716760c77c5a09529a6cb974ce337c656f0f898d4debc4ad5f3b4c13b3635156b94210fd7bf265f427e47d976a6076b13b44994b4e0214ca374aa6e9ad44b777af876674ffab924aed65092090b251b52b685d8e52e4f8d7a890087d361ce4cefc6399d8ac52b184", 0xdb}, {&(0x7f0000000140)}, {&(0x7f0000000380)="deed6612444b97ddd49a1a443bf653fc8de626e433c222135f528c4c1d20a562d5e68e9327b47a2948c20dd41e053b77e28cff5140f3ec2a321a53435c953156caec1edef36e4cbbfd5c20a395ccb7d093b1682cdcfeb1059cc4be1af944b3138dba806298c6e37957854e47d951d2f8ae13355af205401dbf29061302110f1723dd57d268514f710fe3553c0e20c006b000ea778924c4c06ced46f5bdce9058bf8863e6180f1fad8f4dd7b3fda9e2e7ae066e6993cc0774027d44baba3b6db4fe0f41924088c75e099a3bfacc496c5f53d3483c628ebd2f1f88671d9ea37d9823ac2fe3ceb4a62a8dba2c7701e6f2ea53760c049345f32c2a6fe471", 0xfc}, {&(0x7f0000000180)="cab80817ee5d2850ebd2f583a5169cff83136d250adf63521fdc99d30be1656bf643370dcbc0e819627191ac277cd834db0ed11d4675253b6864154081a952b5f30cc98b8d3d79db30136b32dfb0f0150433673f8b0f164196f5a454ddbd2dc88c", 0x61}, {&(0x7f00000005c0)="323e56c425f6c4b42d414ad25704c413da4c21b71ff631713540b5c80a90b9078c03721ccb063485389d28938148a9f7f3c5f78abc0b849fb37851a26296b6f402fcbef734e4ca8c3d94d94379dd467875174c0097a9b71c0cc9bd6777eff5f71ddba39865192aa5cd95f18357b2daa0748f6143da40673c40395c3180839bfc87033afdc80d2a3d21dc91c73c3d94148faa4a0eaf7d2827e6ebcf196f50c3859591e130b8d98aab30841f11b220714b28ecd91ab5e0f9d9013d81fd76354eb1bf562e6666ea13e37af58fa9236ef3bf743fc094abac5ff6b6480c8b86903a397ad4c70a343f0ca649ffe06e9ac2082c2465e9cc8db533de9530cfecf4f19a7983d7a6f4153110e88fd3112a5572891084f5606923778210d24de7aca73d92583a8fc64b00e10306903b7b2cab968f0a4780f09c4fe65978e1cdce7f5e6e6787ea6111b388192b27357f30213614fee3d100adc394f9a3e4868247edd1335ea9113bfac6571df7fef65e9cb5158b2450e9231bc0578e1f3ea8dfa508a6350aad09c5dfd252bd96a44a60f962e1806e1385abc8fb6ab55320faf06dea86c5a07b2c9fcaf89efc55db248fceb7c875bf2c1962985633351d44656bf2d410c162048cb0b43723501bf3a64aaae050497d8b134e135e85ee5131821d7227cdcf9dd68d28e5eb2266d9d6f79c3bf7defc9c3ecdc0c8f435a3247d12f761aa26a2daf78a4db5d59e8338d8f5313052006117a559e729c6d0af041ccaf53f076e8d8054d06c0ec3dab424aa8daa82c2ba795ad9ce60cb2eaf152285afe2f16f3974211d47c15c20b0bb183928d2e3d3b2c5adf39600a3a8a92c6d09e46348bd846265312127c4d3b958add026d0549ef1964739f632f21abd898e2d3eab26a645cf92b1535c40e7c68c1358dbd07326514f2cfd7201509cddd65d491d9c035bf99875701043a2fce0354291b4d434e6c8cd3d1592799f61a1551961a5e1f745a6be6ddd08bcfafd6f5edbebda57ef4987eb62d694edf38e788a8d5c2c027b2a64ec45048e4e4cdb6bb02b730d13e5ae6462e32d81d83795684a8ec0c2c7b6aa48a28231cfaef180cdbf4e5402320813cb98ed02e364676bb5985c3916762ea6884e12d6fb874d8fb0e3927f11599f6375614cf4949101ba7039abdbf39a350853f4b3d4ad966aff6ebcbc6b858f518b3142a14682318de9d6e39aad69f7bed7c54d3f30ca3df4b9d9b915fddcf58d9d2f0d72e9268290e84b3c697f1e0d7cfcdc83ee81c8bc7df2fcc08f1e68b9d8d13dd5d9da3144f890cd2004f525aa50d194b8d6165f84b4d8b509fe93c94dbd3970f87b4670be0737f58419c813fcc1051a26774e518d3ff77f99530fbf41970dd1cb0e5700247d528c8f9d83cb7f60957e91986c9c73c0464c0f2ed7bd26655dabd2ffcbb05649b691bed026647afd6c7305de10cd4bd1d592bd26b250907e7f1f07cf9b94680524b6eb03b4c0f40619d52e9c7ab2979c8bbbd08b0384c0577ff005da26250ee5d37e0215159c84816c321337da1d7a7c24214910a3782e921404ef338095768a9fa3923ace62e63a782d0b392b9338072c6d0fbb8fdf9a4abe39dcf29818f304c568ded5e0f31cfdfb2bb062435635456b9d6fe7f62aa0d03775365cbde194eb2d081f463e01592912455ef2219b8e65a84be6592cc7097e029642ab6d17022d5d052312e3f6110a429bd5299d6e3591c18fa3543f99679bb29c615f6d8143a8fc800dc692bbe5e8dcdc637d62b3410c43de9fe779543ea6b1e4aa8e0a6dec0f9e1daa584b73c0815ef520430f0e535329ebd34f84fa9860c63ab11b71896cad722bab1fcb9447d6253d8de4d7588e66748391d7de0baf3d8d0438053167a6261416482db80500ebbb6b360a687471ea5083aa7522288232e6cf1640b8b3550fe56eaf0ad26a2fd8dab78721022f86f6575ef1e73c016bfa05101b0d1d90fba4bcc4c949d1050e40d20d4cb3ee1f6683b4a9fb5de73a927f725d78a5f6d457efb5a4494bda915fa9232c280b0a534c9359eac48acbcd53e45a54e6a5755329773b8ce593c32386e04350d67276ab0cbb06171a20efd983af3a500ebe4f1ffe1edcfdf822734d156377368ae22829ff36a4bd0f2c2e4b94b625b2b63dafa6acd1d964e2950d24a40f3b6abbc1ed8f21c5c4a81c3d229931faf1577167b3ce168a49ad059c6381bb9d7aecb1006cfec9642c0c7fbbde0d2b54a7f14ce4e5fbd5e0f2032115a25d6b45bb1f9ca4a1a428ed73244520eade6a5d968d6b01bbbfbd287c0f53d0d99d26efa6ebad270d04842ba1a294625a63e9aef8e18622b56a34abad4362a6a8300884d033ad95c0b42c86608d4fcccd925c8d31d8e872d8fc053902b7be10fa6bbbffb2869552c370517b10ffb5ecc3082374ad125fa8a080ddec37ec2493edb208cb11668e1239ae5a55e54a4775735d6d451a1f436e8b6aafd124e5edfa130cd67fdaebb25114846469bb4ce4ef4c131d4dd9ae9347c4bd152c3ec3044e2e8774a6fb84a5d7d93d0b551dc0be0e5c16a2a7a67d1629d8f0bc7fcae7bbff3333a47496c6800ed5e95fd719ec024535ca1c6d39db4c1e81b0a6c6e43ad21177c4f608300b6fae97260719be92eb9a6ae1031d2a66ada7118db3c60a1d7d9194ab60c953b7d17a100f13e713505fd8cb71fdec2958071fb17ab1f7574dc160f6a23a0fec85c65d7a44d0a82f3f1a40b1576d96880838defd66db419ca8ba08d2ce7d18f967e250e649e756bcac2de0397d9ea1cec8c64e06188036eac00a8857f2e1fd2b353462d82777344a28d4619459ac0ddc2d74aba234521719ae93197a819e405366d3318ef1ed647a2042d434a58b49dc5290a9266c741a0e0497be80acbc407a01b99d9b11506f16024ed01c816ccffbe22a1a2b02b546e103538232e3f7e6f77cf08cd4e5acc397e408aad8b7e3dfc4a485d02dd4073cd4120f75924b2e94a4c4be754880e64b84f466015d0c7a1bbbe6491e5443f7e17ea127f9be0ef13e87e5279b363352786e275b9f2ac6a55220c41f844826995c9519ecc259860f78d9da58731d7bdfdd03d608a06e22f6e200386aab595025c3ac5054bc9e1d9d29b525adda8325534e65e2c9a5e63d2c13a664689e10a47163660f7c067e606c458d7cefd4528a4421d87f2265eb41a1d9dfb257eacd0cd22477adce7c919cdd7c4189c33460cebbb2a4697b61acd70fd0183bd8ab2e932aef1b39303d40f0a53dcf71a5531977e88519c4f15bc7a3216a53d9aa5a1e78fd875b3b953c82244c7d3689f463c886589a912978c7dfa02811063aeb7bf684b7d0a884df1bb6ae37beca77f59955923dc389b9015b89af990742370c83325dad240f88439589d2b376a060be225b609815a13caf840f61b698bc9e0f008bf2b31d602a268fd3cf3a3b19a1d2f46ea8fdb348975e228d76f4495426f9d923c441c417d6e77f64642b27ed70e601d16069e45598eabe9da23ac78f62ccbf6836ec5e6be2735e5047067fcb77df78ad238c85b3c6e847787b4c969d949ba14f03819b6f9adf190726508e5fa50fd22f9eb5016391ee80d4ff3266857a68c09a3b0f585b5f724e2f29ef0937fa8cbff515eae79b491a6abadf92740696c0ab6c9aadd245244c494ea8a04d9f883c828196ad48b0309c2a952f3228abab3496981b9d72492442f3497ee07c77d96c796ce4e832f0eb5914c142f814105b201c06c9ac4cc82178810846f01308fcd5a79483cdc3275d585f16f5a1ae58ca7ae92511a77918f5bee2670747ae14ac2be3e537b54a0168d4fe46b6afffdf9e7100c976e5d2c5570df06ebb0a980e139b415a0910c6b87ed8448cdf80e60e368e3b45c942e8857c91a9cd8fe1c2adb7fd02f3baaf5b85c6819d24f5992743eafc289e4680219fa08841ce88f42670f608b91c2ee08571773b4e3cfe0851c6c950682354616251b84e8d9e7129e78b3354ebe6ee89743a2504598b5b3d956da0999d64677950f7185098ca26241ff0f66b1235b0bb86516889388af0817ffff772098f54bb24f57fac2dc673ac73b26fdf946553cd41dcc585efca584ef8b750849a0d97d4046b21289a056780c786b6af3a93ee4fc610b97c3f242ab144edb356f420910b29ffbd9adb836373d8374d2e436f7dab38a291bc9e8290194de8002722689c085ecfe1848bad7e747977d538c692073a6e8bc7b397a007c34dd01a96ce9f072e1f4ffc1361163f552146cc59ea9cdddee3243501a10a83279d61bcb789f5a6d71085ab56546d5f31b3c815df6ad19cfac8b9fdc216b8c3d2494c6ad02b7e5df3f85c59f79fb26726f5c1adcb21c98d38b6fa3c77ec30d838b84a57f2bc22d34cf556ad8354a092db080c4d1946c1f0ec2d16df60c81316bcc2b48c97bb15b74c2b213182905edb7ee1240ecaa2a744561eb6e400802df9d932ee1b307acf74ac29a04e13b518ba6186f344107ab0f77f6f4d858be37997db865e46611bd441c095ea5c03cae7c47751cc2936d88acdd9bb599be72f0bb68c1f836ce3c65f0deff55de584051d620d91275479940651cef94928f646cea69285d597f23e903f53028f0348bcde911bcc49a5c22b516ccb567da85b2a57b8edaeebc1b67efb4457f7d9e31768a852313c498ca09dc1abf1d9785aaa9d0b1c5f11513a15a8e1b66ec020c7ee30d2c25be05ce8ab2a358e24ac76349d837f334d342c50e910eb0b75bd338ce5447b119be570485ae577d22fd1bcd84ba84a3ab91ef30875b88d41128ccd9f202e51083d2db8bc45b3eaf63dbea25c7fbe8e662c45ab7577eef608a7a8d705719ef156e065654306166959e9e64ea5a79f11564fcf268ce175e1294876889d1d550a9eb7cb7dc95897cc90c712fd74948ebb694476493f33c52d45f2cf3b05c9ada3b7293f8e6301481a2d4ecbbae3d44f5e6b5bc4e1abef872cda55391b72c3fcad4e6d183b84d2852cdf0663bc0c426de68fd5087f9f99e2bd5d95ca131783df8dca9025fb190426fca77cfa88968299f9c19f1a3c71ae0839c909c0bbfde6581b7f96d6e68a01a8af1b25f987d35e8e3895102bfbf3b64b3264ae73a88a96b3c2d5549301853a86eecaef9af2342ef0c8a2affca227d14f8c4fe2b57d122cb8077ced8233d27347548709cb8990b6d9f22451899788e8c411ddee99179afc3225b45beef37697417b2ebfa1e44ef2a2772a0f2bbd570029eab54e4094d1fa4731ec5e5c1c3fd3a265ce565e55e866316cc7606b5814846e4f19bbe8448004f269394a698514e1da0a8364a8b43b85f6a77ce9185abeded1bdc656ef1ace99ed09c0f24f08f2259f7eab4aa3bfa6553c9389d5cc5e9ca0a7c7ed74f1c0bfd729325de0a132b57824af9619ee66fa478e951ae91492dfe06333ec9cdadf0d9b9ffc0653c66fb505b55908c352e9b244b4fead046b6ed8c891e7031db5fdd08f3c1f536159d1be1e08b7fdba2b1c03b4ed6cb0833f55b80436ca45c1c87e0a9dd742fadef98942c493fa7d295b1028af37d5668d3ebc497b54fdc248299278c0889c4d04ad7243b31d53358965ceb41e7b6573e9883edc86824cf0ecf32eca936db312107f73173d78fb1a870a18df7a4481ea0b516492f760e3775a24fe7617b839a9f419279ec86e648cd75e45c43e9358967ff5defd02d7e3b12c3cae25d9774d87e24e5c61d5472aa6ada594c16daa43598f18dbea6707c9c621d341dcfc5fda4a555295b6346c388e007265554d929376d32ae1667ba569a16654f330a8ea46bf5978779328fa90", 0x1000}, {&(0x7f00000004c0)="beb45cfa0b58cb34725e3c318faf41dec5acaef2036cc53ff0405ef571ee67dac13f3d75ccf55ce1f96aa0db654dc8cd42a0e242b8fdd57f5959de00de473f495e00a39799e2141b6a374bfe5c043de459f680cab76b3c", 0x57}, {&(0x7f00000015c0)="f12a6f23bcd0fdf107f91dac7900a1288ee58201a931ef6468e150b907ea0d7962744c3b8bdf275cba5c10630fb2a74567c9c7decf041d459881c06e6c3f24d7d94ce8ed43e3b4b44f09dc8b338ca10f62d94b5326eef941f66448b484726c753e7d06a353108aa0c750a15db29fa65c8abffc79e641778f099e97a2b5ac58af8ccdd51f2576bba80e68263bb6ad671a258385f37744f26948b7ccdddf593ec3418528ce4a1a9079274f672fd7b3365564e5c1e772d22557a266bafda7", 0xbd}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="aba4ad83d611ea1dac7468fe736baec8371c7877f6fddc257684923d93cbd8f5c984651a6984eede89ee80436cbd3238026128280a7d6bcf2db47c6a9d2119077c81ed464a5d5e209d8ea790381e47b0896b", 0x52}, {&(0x7f0000002700)="1f0523b3325e36cfa7f3a62535102c5104f518d41e92e6ed812b71e4ea4581adaf4dc704e1209bf51253c1dfffa071bca5385bdebbf105dea9a1d90b4aa977a51e6fbc2f6c87551c32f08080b347b6491342e0b37937dbdbe1ecdbae34368f794672fb0281aabf1908ec0580ec25459546d6a9b539e6e5", 0x77}], 0xa, &(0x7f00000028c0)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r3, r4, r5, r0, r7]}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r8]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r9, 0xffffffffffffffff, r11}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee01}}}], 0xac, 0x1}, 0x20004040) (async, rerun: 32) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 23:06:26 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/214) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/214) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) 23:06:26 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) 23:06:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xe}, {0x6, 0x7, 0x8001, 0x9, [0x80, 0x8, 0x16]}}}}, 0x1b) 23:06:26 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000080)=0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) [ 316.401037][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 316.408730][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:26 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/214) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/214) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) 23:06:26 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:26 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 316.536342][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 316.563164][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 316.578137][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 316.728135][ T3724] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 316.830225][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.836574][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.097406][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.112543][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.122505][ T3724] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 317.135834][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.150051][ T3724] usb 4-1: config 0 descriptor?? [ 317.707671][ T3724] usbhid 4-1:0.0: can't add hid device: -71 [ 317.713676][ T3724] usbhid: probe of 4-1:0.0 failed with error -71 [ 317.723310][ T3724] usb 4-1: USB disconnect, device number 55 23:06:28 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000080)=0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:28 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:28 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x49}, "33bdc9c116707cf5ba2703d8fd0040e8033da404145f3268103d68c15fb452ffd6ba7c095642c9835ce31eefaf6aaed441463bdd82a9a8b71c3e5539e6a1feac915d745cd019059712"}, 0x4d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xe}, {0x6, 0x7, 0x8001, 0x9, [0x80, 0x8, 0x16]}}}}, 0x1b) 23:06:28 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$proc_capi20(0xffffff9c, &(0x7f00000004c0), 0x44000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x5) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0xc, &(0x7f0000000000)={0x40, 0x30, 0x25, {0x25, 0xe, "ed319511eb1bd60dc5627596a36f9275751b8ef995bb5dc5b10df0009d95a18e3803e0"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f0000000380)={0x24, &(0x7f0000000140)={0x20, 0xf, 0x1d, "38c28ef4db4876fcbec5834c6ce5fd95f7179f5fc98e8b8f8ee5bacc4d"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000240)={0x20, 0x81, 0x1, "df"}, &(0x7f0000000280)={0x20, 0x82, 0x1, "e8"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, 'pe4'}, &(0x7f0000000300)={0x20, 0x84, 0x4, "0f588c1e"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "8951d7"}}) 23:06:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008840) sendmmsg$inet6(r0, &(0x7f0000006500)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@dev]}}}], 0x28}}, {{&(0x7f00000007c0)={0xa, 0x0, 0x0, @loopback}, 0x17, 0x0, 0x0, &(0x7f0000001c00)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0x0, 0x0, [@dev, @local]}}}], 0x38}}], 0x2, 0x0) 23:06:28 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000080)=0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:28 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) [ 318.188065][ T3653] Bluetooth: hci1: wrong event for mode 0 23:06:28 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xe}, {0x6, 0x7, 0x8001, 0x9, [0x80, 0x8, 0x16]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xe}, {0x6, 0x7, 0x8001, 0x9, [0x80, 0x8, 0x16]}}}}, 0x1b) (async) 23:06:28 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x49}, "33bdc9c116707cf5ba2703d8fd0040e8033da404145f3268103d68c15fb452ffd6ba7c095642c9835ce31eefaf6aaed441463bdd82a9a8b71c3e5539e6a1feac915d745cd019059712"}, 0x4d) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:28 executing program 4: ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:28 executing program 1: syz_emit_vhci(0x0, 0x0) [ 318.256170][ T3653] Bluetooth: hci1: wrong event for mode 0 23:06:28 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:28 executing program 1: syz_emit_vhci(0x0, 0x0) 23:06:28 executing program 4: ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000040)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) 23:06:28 executing program 1: syz_emit_vhci(0x0, 0x0) [ 318.404114][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 318.492834][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 318.498801][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 318.697262][ T23] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 319.077344][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.088331][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.098931][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 319.108395][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.119159][ T23] usb 4-1: config 0 descriptor?? [ 319.601058][ T23] ortek 0003:05A4:2000.0009: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 319.843444][ T15] usb 4-1: USB disconnect, device number 56 23:06:30 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) openat$proc_capi20(0xffffff9c, &(0x7f00000004c0), 0x44000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x5) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0xc, &(0x7f0000000000)={0x40, 0x30, 0x25, {0x25, 0xe, "ed319511eb1bd60dc5627596a36f9275751b8ef995bb5dc5b10df0009d95a18e3803e0"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f0000000380)={0x24, &(0x7f0000000140)={0x20, 0xf, 0x1d, "38c28ef4db4876fcbec5834c6ce5fd95f7179f5fc98e8b8f8ee5bacc4d"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000240)={0x20, 0x81, 0x1, "df"}, &(0x7f0000000280)={0x20, 0x82, 0x1, "e8"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, 'pe4'}, &(0x7f0000000300)={0x20, 0x84, 0x4, "0f588c1e"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "8951d7"}}) 23:06:30 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:30 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x49}, "33bdc9c116707cf5ba2703d8fd0040e8033da404145f3268103d68c15fb452ffd6ba7c095642c9835ce31eefaf6aaed441463bdd82a9a8b71c3e5539e6a1feac915d745cd019059712"}, 0x4d) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (rerun: 64) 23:06:30 executing program 4: ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:30 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) 23:06:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008840) sendmmsg$inet6(r0, &(0x7f0000006500)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@dev]}}}], 0x28}}, {{&(0x7f00000007c0)={0xa, 0x0, 0x0, @loopback}, 0x17, 0x0, 0x0, &(0x7f0000001c00)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0x0, 0x0, [@dev, @local]}}}], 0x38}}], 0x2, 0x0) 23:06:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:30 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) 23:06:30 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) [ 320.364846][ T3653] Bluetooth: hci1: wrong event for mode 0 23:06:30 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4014f50b, &(0x7f0000000000)={0x1, 0x8000000000000000, 0x4}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:30 executing program 2: dup(0xffffffffffffffff) r0 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0xc13c, "31190f25104a77dc767ed5cc001f387b6a151b89fedb6ef72f9355565540fc22"}) write$eventfd(r0, &(0x7f0000000080)=0x71c89b76, 0x8) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f00000000c0)='0', 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000bc0)=""/224, 0xe0}, {&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000480)=""/116, 0x74}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000940)=""/253, 0xfd}, {&(0x7f0000000a40)=""/180, 0xb4}], 0x4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 23:06:30 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) [ 320.571522][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 320.584695][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 320.757340][ T23] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 321.117365][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.128384][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.139030][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 321.148271][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.157902][ T23] usb 4-1: config 0 descriptor?? [ 321.639618][ T23] ortek 0003:05A4:2000.000A: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 321.891100][ T3724] usb 4-1: USB disconnect, device number 57 23:06:32 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$proc_capi20(0xffffff9c, &(0x7f00000004c0), 0x44000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x5) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0xc, &(0x7f0000000000)={0x40, 0x30, 0x25, {0x25, 0xe, "ed319511eb1bd60dc5627596a36f9275751b8ef995bb5dc5b10df0009d95a18e3803e0"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f0000000380)={0x24, &(0x7f0000000140)={0x20, 0xf, 0x1d, "38c28ef4db4876fcbec5834c6ce5fd95f7179f5fc98e8b8f8ee5bacc4d"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000240)={0x20, 0x81, 0x1, "df"}, &(0x7f0000000280)={0x20, 0x82, 0x1, "e8"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, 'pe4'}, &(0x7f0000000300)={0x20, 0x84, 0x4, "0f588c1e"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "8951d7"}}) 23:06:32 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0x0, "da0ec312d20aadfa"}}}}, 0xf) 23:06:32 executing program 2: dup(0xffffffffffffffff) r0 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0xc13c, "31190f25104a77dc767ed5cc001f387b6a151b89fedb6ef72f9355565540fc22"}) (async) write$eventfd(r0, &(0x7f0000000080)=0x71c89b76, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f00000000c0)='0', 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async, rerun: 32) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000bc0)=""/224, 0xe0}, {&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000480)=""/116, 0x74}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) (async) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000940)=""/253, 0xfd}, {&(0x7f0000000a40)=""/180, 0xb4}], 0x4, 0x0) (async, rerun: 64) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 64) 23:06:32 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4014f50b, &(0x7f0000000000)={0x1, 0x8000000000000000, 0x4}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:06:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008840) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000006500)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@dev]}}}], 0x28}}, {{&(0x7f00000007c0)={0xa, 0x0, 0x0, @loopback}, 0x17, 0x0, 0x0, &(0x7f0000001c00)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0x0, 0x0, [@dev, @local]}}}], 0x38}}], 0x2, 0x0) 23:06:32 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0x0, "da0ec312d20aadfa"}}}}, 0xf) 23:06:32 executing program 2: dup(0xffffffffffffffff) (async) r0 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0xc13c, "31190f25104a77dc767ed5cc001f387b6a151b89fedb6ef72f9355565540fc22"}) (async) write$eventfd(r0, &(0x7f0000000080)=0x71c89b76, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f00000000c0)='0', 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) process_vm_readv(0x0, &(0x7f0000000440), 0x0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000bc0)=""/224, 0xe0}, {&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000480)=""/116, 0x74}, {0x0}, {&(0x7f0000000cc0)=""/50, 0x32}], 0x6, 0x0) (async) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000000940)=""/253, 0xfd}, {&(0x7f0000000a40)=""/180, 0xb4}], 0x4, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 23:06:32 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4014f50b, &(0x7f0000000000)={0x1, 0x8000000000000000, 0x4}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) [ 322.446718][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 322.513263][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:32 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0x0, "da0ec312d20aadfa"}}}}, 0xf) 23:06:32 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000000000000000000000000000000000087f2f9449f1645d36274023bf37120cc37cd603981b1d6ea2e11ccb4642c12142b8146bad217e01df0cd96e10700000000000000967e5470ebc62e9ebfb23e6e898a24a64d11"], 0x15) [ 322.580496][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) [ 322.797288][ T23] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 323.167478][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.184335][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.203293][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 323.215673][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.234713][ T23] usb 4-1: config 0 descriptor?? [ 323.551328][ T23] ortek 0003:05A4:2000.000B: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 323.806589][ T23] usb 4-1: USB disconnect, device number 58 23:06:34 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) 23:06:34 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x10, "bef172", 0x401}, {@fixed, 0x0, 0x0, 0x0, "e80600"}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 23:06:34 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000000000000000000000000000000000087f2f9449f1645d36274023bf37120cc37cd603981b1d6ea2e11ccb4642c12142b8146bad217e01df0cd96e10700000000000000967e5470ebc62e9ebfb23e6e898a24a64d11"], 0x15) 23:06:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r1, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = signalfd(r2, &(0x7f00000000c0)={[0xf9, 0x800000]}, 0x8) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x10000, 0x8, '\x00', 0x0, &(0x7f0000000180)=[0x0]}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) fchmod(r4, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r5], 0x6) 23:06:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x4c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x1f, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x670, 0x0, 0x5, 0x2, 0x20, 0x51}, 0xf, &(0x7f0000000780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x8c, 0x4}]}, 0x7, [{0xae, &(0x7f00000007c0)=@string={0xae, 0x3, "f91e1c5ecd026d5935c90f211613edb60552bbd60660a8ceb43207fe4ccf75d1be341cc7fb0766c9dc184bf1098b222bb05256e3098082d40efa99a0955981a766d5150bcb2ef1d5faa9ad1c407ae4393720b00f58bb50b0e43bd3a22ae85b3b33031d008b578fcda8995ed915c93ce20fe022213a64992ec94223dbf1a4ff5e0634dc4444cdac7ffd4d6fdfa1d1dcf8162c25b23d47d40608b4531b477893664e678707929d756896746c17"}}, {0x71, &(0x7f0000000880)=@string={0x71, 0x3, "cc54e10163f828a44714d528547221c6d511070ec552d6b7773fb1adf36b848e5f4b997f8f002610b31eaec03ffbe646ae2ac8d875b7bac2f17a83f639bd42bff5393102f02a686d57b49c176f63e2aa48b39a9d1473ecd5cf27d2d3edcc3388dd9c0895b722ce09e10091f5785cae"}}, {0xf6, &(0x7f0000000900)=@string={0xf6, 0x3, "96435a833b62eecb7db10de0d2340ebbe55f5d318c08494c0727d595abbfb990fcc67f4edee96bb489ba8593dd6bfb503fa4c2ed0408adf8b1c50d23c92c3a662a9a4423bd4e892716cc5c44119283ca7b6ff673f9da1ef019c06f32f78a837778f59f88f4703ed6759947f3447a14e00ba84ba6e99de26724197170599e554fd3f646e4ff6615e359b782b3ff90c545ddad39c6b49d399374ff42c941449e5161843a21ca0b11b902353f91015293d5bed5a431ca76b4c086e566b156d44d9a26800e93167d811fa20dcfd887df177079aa208221ed5d2f58c1bc8212b266d32a26b7dd4883d339dfb552ebe12545bf4fc07c3f"}}, {0xac, &(0x7f0000000a00)=@string={0xac, 0x3, "54676fe5c45cd78180f26ae6a4cdd8f8e97842cb18fe70e6f47eb4a29fa4ee1e616466d18f0e6ee3365e400f4479e1d51d5e04283c9c1b5b96225029020a5139304a38338cfb875a1d41121c22cd18ce0ec4b2c4281be7106d8b4212d7ef558773e6422e0246af4ac682d6bf5011250ffaa5e39ae24ae16680f9777396ef0adf6ccf1aee591a8f1fab399a21a1934affa89ffeaba87a4f64a78e47f7c93b3ab70e4112bee602adc6d134"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x414}}, {0x102, &(0x7f0000000b00)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000e40)={0x14, &(0x7f0000000d00)={0x20, 0x31, 0x50, {0x50, 0x21, "29e4a487f39a7918ab163a7f65326bc1117f0aadd2c91bfd1cd2ccf51e51557bb0ae2a54eacfa0c6ec3444cc3cded4265228ce75cb179549edb9f5ec7244196736165b31cde2d86b54c8eb2829d3"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000dc0)={0x0, 0x22, 0x1, {[@global]}}, &(0x7f0000000e00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x5a2}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e80)={0x0, 0x31, 0x14, "988a3e0f313a32f5af976b23d5b5af867aec48dc"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000f40)={0x20, 0x1, 0xda, "e9d61b488689368b19253236fd086aae2363e41d379e525622d1f438f3ea33f8dba96f7b8c3cf7762b76f770007c294a60ae3bd4ded225eff3e2b08810d78a496c421c9ac07779ebe3bff34e0541fe89f49bdad636c699886b00b393ab0c86f847089d38bab7b3537d91c21ad72c9fe402e3085073a2e1f493a7cbc1731a86d4ff0b1128aaac7d71954c81795a3d161b90b668bc6c67a8b5a373b2057908444d222266d10cb1f1f0b8b0ad45bb0adb2e269623c102666b790e9a2be277aa4d027a90fe2e2efb5d39c6cb91828a2d34affacab74a3a493de3d5d0"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) r2 = syz_usb_connect$uac1(0x3, 0xb4, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x5, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x200, 0x6, 0x3, 0x6}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x10, "63bf10bbf6"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x4], 0x5}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x3f, "0434dada07"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x5, 0x1, "b26c9ed6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x3, 0xf}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9b, 0x82, "0816"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0xf9, 0x80, {0x7, 0x25, 0x1, 0x80, 0x8, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x9, 0x4, {0x7, 0x25, 0x1, 0x0, 0x3f, 0xfffa}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x1, 0x9, 0xc7, 0x81}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x8, 0x1d, 0x4, 0x3f}, @generic={0x1f, 0x10, 0xa, "47383d1d2a867f79f7e093d8c157b960789e75e93f0f025baa02f08a"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x158, 0xff00, 0x101, [0x3f00, 0xc0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x67, 0x8, 0x6}, @ptm_cap={0x3}]}, 0x2, [{0x8c, &(0x7f00000002c0)=@string={0x8c, 0x3, "d0526fc2d165bcbfc257c953d9d46176b6db6ec70f44ea5d6dc8d3c0e61de24bc66a595f8c4a9f627ec57634aaf85ec1ae3f7bb3d03bd14796ae6f722bae6eea9f572b0008c3511690f9fd1fff8dcd216c8f3725c5a96a98a30ad0360d0ca7470f7395fce2bf00f897f389ad01e9267f5a2937f6c054f93b32274f3de41656a1a1bc114b76f273e75550"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000440)={0xc, &(0x7f0000000280)={0x0, 0xb, 0x5, {0x5, 0xc, "c8c607"}}, &(0x7f00000003c0)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "04de9434beadd03083e34d128c10b99db34fab5ee9d674e9f00d45bbc586aa89c95def47eac948a3637b3fbf3159b3ead251aa5d1b6a09275b0a"}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000480)={0x0, 0x0, 0x77, "3fe4928bcef50ca841726dc64b2573a66b2050720a30a3ea795854cb9c88cbc8e657459a7a3a1ed3db6d542293943a9975b2c1115d624f87c898612a253f6c33bb36cb098894083da6e376cd5b155db9ef19f0395bc4957a2999f7bf1233b24f03a8cca8e4f203457a8aeb686c9da4ec422a325bb65750"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x81, 0x3, "a77396"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, '[B'}, &(0x7f0000000600)={0x20, 0x83, 0x1, 'U'}, &(0x7f0000000640)={0x20, 0x84, 0x2, "ab2e"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "1de51a"}}) 23:06:34 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e01007ac800da0ec312d20aadfa"], 0xf) 23:06:34 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x10, "bef172", 0x401}, {@fixed, 0x0, 0x0, 0x0, "e80600"}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x10, "bef172", 0x401}, {@fixed, 0x0, 0x0, 0x0, "e80600"}]}}}, 0x31) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 23:06:34 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e01007ac800da0ec312d20aadfa"], 0xf) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e01007ac800da0ec312d20aadfa"], 0xf) (async) 23:06:34 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000000000000000000000000000000000087f2f9449f1645d36274023bf37120cc37cd603981b1d6ea2e11ccb4642c12142b8146bad217e01df0cd96e10700000000000000967e5470ebc62e9ebfb23e6e898a24a64d11"], 0x15) 23:06:34 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) 23:06:34 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e01007ac800da0ec312d20aadfa"], 0xf) 23:06:34 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xffffa0bf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0c047fc800da0ec312d20aadfa3478ba2e5753b945aead5d19dc03d024809f4a0cbf86ac0b1635c49bccabe07b952d"], 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x3, 0xa}, {0x3, 0x2, 0x94, 0x7, 0xebc5}}}}, 0x17) 23:06:34 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) 23:06:34 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x10, "bef172", 0x401}, {@fixed, 0x0, 0x0, 0x0, "e80600"}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 23:06:34 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cff726f75705f69643d8df8abc1994125ee4b6a643109072095c85845b6a1330a3ff09688948d24bbfc16426f97ab3dba80b456150a54f8beb919b503c5063eaf1555b25a53700d447fbc1774ee43e872510da6e1e934c010e5ebb0d57c47f510a214", @ANYRESDEC=r2]) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r5 = openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r8, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r9) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x151101) dup(r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="760606e87a3a54ef8dd4ce198413bf26265ae08aecde8f4422b033e53708f51f93eab3e09d4932f7242947dba881f646f0893b9d96f90b46c8f2e0224cc703fc9cca6972b72a510cc0f0be1a3fc9352170a91f29b0faf2d182b17262fcacd602d974bec982aa4a9a55c2dc25a4898d9917ac03af6a7c431b89efc3857762ffacb5f5d1be10fb81811ea6d720423f203237c9bfde91247618db06e8345b1173ff2b7f07e0826ab93d2ecd", 0xaa}], 0x1, &(0x7f0000000280)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r3, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xdc, 0x4000}, 0x800) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r1, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = signalfd(r2, &(0x7f00000000c0)={[0xf9, 0x800000]}, 0x8) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x10000, 0x8, '\x00', 0x0, &(0x7f0000000180)=[0x0]}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) fchmod(r4, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r5], 0x6) [ 324.697358][ T4977] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 325.057847][ T4977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.074090][ T4977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.084445][ T4977] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 325.097915][ T4977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.120270][ T4977] usb 4-1: config 0 descriptor?? [ 325.361978][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.370971][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.622622][ T4977] ortek 0003:05A4:2000.000C: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 325.821966][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.831567][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.841412][ T4977] usb 4-1: USB disconnect, device number 59 23:06:36 executing program 0: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7e) 23:06:36 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xffffa0bf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0c047fc800da0ec312d20aadfa3478ba2e5753b945aead5d19dc03d024809f4a0cbf86ac0b1635c49bccabe07b952d"], 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x3, 0xa}, {0x3, 0x2, 0x94, 0x7, 0xebc5}}}}, 0x17) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9], 0x1, 0x80800}) (async) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xffffa0bf) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0c047fc800da0ec312d20aadfa3478ba2e5753b945aead5d19dc03d024809f4a0cbf86ac0b1635c49bccabe07b952d"], 0xf) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x3, 0xa}, {0x3, 0x2, 0x94, 0x7, 0xebc5}}}}, 0x17) (async) 23:06:36 executing program 1: 23:06:36 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cff726f75705f69643d8df8abc1994125ee4b6a643109072095c85845b6a1330a3ff09688948d24bbfc16426f97ab3dba80b456150a54f8beb919b503c5063eaf1555b25a53700d447fbc1774ee43e872510da6e1e934c010e5ebb0d57c47f510a214", @ANYRESDEC=r2]) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r5 = openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r8, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r9) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x151101) dup(r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="760606e87a3a54ef8dd4ce198413bf26265ae08aecde8f4422b033e53708f51f93eab3e09d4932f7242947dba881f646f0893b9d96f90b46c8f2e0224cc703fc9cca6972b72a510cc0f0be1a3fc9352170a91f29b0faf2d182b17262fcacd602d974bec982aa4a9a55c2dc25a4898d9917ac03af6a7c431b89efc3857762ffacb5f5d1be10fb81811ea6d720423f203237c9bfde91247618db06e8345b1173ff2b7f07e0826ab93d2ecd", 0xaa}], 0x1, &(0x7f0000000280)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r3, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xdc, 0x4000}, 0x800) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) memfd_create(&(0x7f00000001c0)='\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cff726f75705f69643d8df8abc1994125ee4b6a643109072095c85845b6a1330a3ff09688948d24bbfc16426f97ab3dba80b456150a54f8beb919b503c5063eaf1555b25a53700d447fbc1774ee43e872510da6e1e934c010e5ebb0d57c47f510a214", @ANYRESDEC=r2]) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async) openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r8, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r9) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x151101) (async) dup(r10) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="760606e87a3a54ef8dd4ce198413bf26265ae08aecde8f4422b033e53708f51f93eab3e09d4932f7242947dba881f646f0893b9d96f90b46c8f2e0224cc703fc9cca6972b72a510cc0f0be1a3fc9352170a91f29b0faf2d182b17262fcacd602d974bec982aa4a9a55c2dc25a4898d9917ac03af6a7c431b89efc3857762ffacb5f5d1be10fb81811ea6d720423f203237c9bfde91247618db06e8345b1173ff2b7f07e0826ab93d2ecd", 0xaa}], 0x1, &(0x7f0000000280)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r3, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xdc, 0x4000}, 0x800) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) 23:06:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r1, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = signalfd(r2, &(0x7f00000000c0)={[0xf9, 0x800000]}, 0x8) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x10000, 0x8, '\x00', 0x0, &(0x7f0000000180)=[0x0]}) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) (async) fchmod(r4, 0x4) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r5], 0x6) 23:06:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x4c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x1f, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x670, 0x0, 0x5, 0x2, 0x20, 0x51}, 0xf, &(0x7f0000000780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x8c, 0x4}]}, 0x7, [{0xae, &(0x7f00000007c0)=@string={0xae, 0x3, "f91e1c5ecd026d5935c90f211613edb60552bbd60660a8ceb43207fe4ccf75d1be341cc7fb0766c9dc184bf1098b222bb05256e3098082d40efa99a0955981a766d5150bcb2ef1d5faa9ad1c407ae4393720b00f58bb50b0e43bd3a22ae85b3b33031d008b578fcda8995ed915c93ce20fe022213a64992ec94223dbf1a4ff5e0634dc4444cdac7ffd4d6fdfa1d1dcf8162c25b23d47d40608b4531b477893664e678707929d756896746c17"}}, {0x71, &(0x7f0000000880)=@string={0x71, 0x3, "cc54e10163f828a44714d528547221c6d511070ec552d6b7773fb1adf36b848e5f4b997f8f002610b31eaec03ffbe646ae2ac8d875b7bac2f17a83f639bd42bff5393102f02a686d57b49c176f63e2aa48b39a9d1473ecd5cf27d2d3edcc3388dd9c0895b722ce09e10091f5785cae"}}, {0xf6, &(0x7f0000000900)=@string={0xf6, 0x3, "96435a833b62eecb7db10de0d2340ebbe55f5d318c08494c0727d595abbfb990fcc67f4edee96bb489ba8593dd6bfb503fa4c2ed0408adf8b1c50d23c92c3a662a9a4423bd4e892716cc5c44119283ca7b6ff673f9da1ef019c06f32f78a837778f59f88f4703ed6759947f3447a14e00ba84ba6e99de26724197170599e554fd3f646e4ff6615e359b782b3ff90c545ddad39c6b49d399374ff42c941449e5161843a21ca0b11b902353f91015293d5bed5a431ca76b4c086e566b156d44d9a26800e93167d811fa20dcfd887df177079aa208221ed5d2f58c1bc8212b266d32a26b7dd4883d339dfb552ebe12545bf4fc07c3f"}}, {0xac, &(0x7f0000000a00)=@string={0xac, 0x3, "54676fe5c45cd78180f26ae6a4cdd8f8e97842cb18fe70e6f47eb4a29fa4ee1e616466d18f0e6ee3365e400f4479e1d51d5e04283c9c1b5b96225029020a5139304a38338cfb875a1d41121c22cd18ce0ec4b2c4281be7106d8b4212d7ef558773e6422e0246af4ac682d6bf5011250ffaa5e39ae24ae16680f9777396ef0adf6ccf1aee591a8f1fab399a21a1934affa89ffeaba87a4f64a78e47f7c93b3ab70e4112bee602adc6d134"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x414}}, {0x102, &(0x7f0000000b00)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000e40)={0x14, &(0x7f0000000d00)={0x20, 0x31, 0x50, {0x50, 0x21, "29e4a487f39a7918ab163a7f65326bc1117f0aadd2c91bfd1cd2ccf51e51557bb0ae2a54eacfa0c6ec3444cc3cded4265228ce75cb179549edb9f5ec7244196736165b31cde2d86b54c8eb2829d3"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000dc0)={0x0, 0x22, 0x1, {[@global]}}, &(0x7f0000000e00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x5a2}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e80)={0x0, 0x31, 0x14, "988a3e0f313a32f5af976b23d5b5af867aec48dc"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000f40)={0x20, 0x1, 0xda, "e9d61b488689368b19253236fd086aae2363e41d379e525622d1f438f3ea33f8dba96f7b8c3cf7762b76f770007c294a60ae3bd4ded225eff3e2b08810d78a496c421c9ac07779ebe3bff34e0541fe89f49bdad636c699886b00b393ab0c86f847089d38bab7b3537d91c21ad72c9fe402e3085073a2e1f493a7cbc1731a86d4ff0b1128aaac7d71954c81795a3d161b90b668bc6c67a8b5a373b2057908444d222266d10cb1f1f0b8b0ad45bb0adb2e269623c102666b790e9a2be277aa4d027a90fe2e2efb5d39c6cb91828a2d34affacab74a3a493de3d5d0"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) (async) r2 = syz_usb_connect$uac1(0x3, 0xb4, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x5, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x200, 0x6, 0x3, 0x6}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x10, "63bf10bbf6"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x4], 0x5}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x3f, "0434dada07"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x5, 0x1, "b26c9ed6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x3, 0xf}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9b, 0x82, "0816"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0xf9, 0x80, {0x7, 0x25, 0x1, 0x80, 0x8, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x9, 0x4, {0x7, 0x25, 0x1, 0x0, 0x3f, 0xfffa}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x1, 0x9, 0xc7, 0x81}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x8, 0x1d, 0x4, 0x3f}, @generic={0x1f, 0x10, 0xa, "47383d1d2a867f79f7e093d8c157b960789e75e93f0f025baa02f08a"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x158, 0xff00, 0x101, [0x3f00, 0xc0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x67, 0x8, 0x6}, @ptm_cap={0x3}]}, 0x2, [{0x8c, &(0x7f00000002c0)=@string={0x8c, 0x3, "d0526fc2d165bcbfc257c953d9d46176b6db6ec70f44ea5d6dc8d3c0e61de24bc66a595f8c4a9f627ec57634aaf85ec1ae3f7bb3d03bd14796ae6f722bae6eea9f572b0008c3511690f9fd1fff8dcd216c8f3725c5a96a98a30ad0360d0ca7470f7395fce2bf00f897f389ad01e9267f5a2937f6c054f93b32274f3de41656a1a1bc114b76f273e75550"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000440)={0xc, &(0x7f0000000280)={0x0, 0xb, 0x5, {0x5, 0xc, "c8c607"}}, &(0x7f00000003c0)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "04de9434beadd03083e34d128c10b99db34fab5ee9d674e9f00d45bbc586aa89c95def47eac948a3637b3fbf3159b3ead251aa5d1b6a09275b0a"}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000480)={0x0, 0x0, 0x77, "3fe4928bcef50ca841726dc64b2573a66b2050720a30a3ea795854cb9c88cbc8e657459a7a3a1ed3db6d542293943a9975b2c1115d624f87c898612a253f6c33bb36cb098894083da6e376cd5b155db9ef19f0395bc4957a2999f7bf1233b24f03a8cca8e4f203457a8aeb686c9da4ec422a325bb65750"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x81, 0x3, "a77396"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, '[B'}, &(0x7f0000000600)={0x20, 0x83, 0x1, 'U'}, &(0x7f0000000640)={0x20, 0x84, 0x2, "ab2e"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "1de51a"}}) 23:06:36 executing program 1: 23:06:36 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xffffa0bf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0c047fc800da0ec312d20aadfa3478ba2e5753b945aead5d19dc03d024809f4a0cbf86ac0b1635c49bccabe07b952d"], 0xf) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x3, 0xa}, {0x3, 0x2, 0x94, 0x7, 0xebc5}}}}, 0x17) 23:06:36 executing program 0: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7e) 23:06:36 executing program 1: [ 326.478911][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.487674][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.505804][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:06:36 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x1, 0x7, 0x2}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x1, 0xc85, 0x2, 0x3ff}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x40, 0xa83, 0x4, 0x100}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x77a, 0x5}}, @l2cap_disconn_req={{0x6, 0xfe, 0x4}, {0xfffc, 0x3}}]}}, 0x3a) 23:06:36 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x0, 0x1, [{0xc9, 0x2, 0x186}]}}}, 0xc) [ 326.522326][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:06:36 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cff726f75705f69643d8df8abc1994125ee4b6a643109072095c85845b6a1330a3ff09688948d24bbfc16426f97ab3dba80b456150a54f8beb919b503c5063eaf1555b25a53700d447fbc1774ee43e872510da6e1e934c010e5ebb0d57c47f510a214", @ANYRESDEC=r2]) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r5 = openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r8, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r9) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x151101) dup(r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="760606e87a3a54ef8dd4ce198413bf26265ae08aecde8f4422b033e53708f51f93eab3e09d4932f7242947dba881f646f0893b9d96f90b46c8f2e0224cc703fc9cca6972b72a510cc0f0be1a3fc9352170a91f29b0faf2d182b17262fcacd602d974bec982aa4a9a55c2dc25a4898d9917ac03af6a7c431b89efc3857762ffacb5f5d1be10fb81811ea6d720423f203237c9bfde91247618db06e8345b1173ff2b7f07e0826ab93d2ecd", 0xaa}], 0x1, &(0x7f0000000280)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r3, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xdc, 0x4000}, 0x800) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) memfd_create(&(0x7f00000001c0)='\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cff726f75705f69643d8df8abc1994125ee4b6a643109072095c85845b6a1330a3ff09688948d24bbfc16426f97ab3dba80b456150a54f8beb919b503c5063eaf1555b25a53700d447fbc1774ee43e872510da6e1e934c010e5ebb0d57c47f510a214", @ANYRESDEC=r2]) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async) openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r8, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r9) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x151101) (async) dup(r10) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="760606e87a3a54ef8dd4ce198413bf26265ae08aecde8f4422b033e53708f51f93eab3e09d4932f7242947dba881f646f0893b9d96f90b46c8f2e0224cc703fc9cca6972b72a510cc0f0be1a3fc9352170a91f29b0faf2d182b17262fcacd602d974bec982aa4a9a55c2dc25a4898d9917ac03af6a7c431b89efc3857762ffacb5f5d1be10fb81811ea6d720423f203237c9bfde91247618db06e8345b1173ff2b7f07e0826ab93d2ecd", 0xaa}], 0x1, &(0x7f0000000280)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r3, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xdc, 0x4000}, 0x800) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) 23:06:36 executing program 0: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7e) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7e) (async) 23:06:36 executing program 1: syz_emit_vhci(0x0, 0x0) 23:06:36 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x1, 0x7, 0x2}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x1, 0xc85, 0x2, 0x3ff}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x40, 0xa83, 0x4, 0x100}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x77a, 0x5}}, @l2cap_disconn_req={{0x6, 0xfe, 0x4}, {0xfffc, 0x3}}]}}, 0x3a) 23:06:36 executing program 0: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x6f3}, {0x7, [{@any, 0x3, 0x8, "f0db5e", 0x0, 0xfb, "79b450aeef6b83a1c3d498963d8ca637d2a19add6c6c4b1ed2a66e1948ccc0a6f8789307fdab83fec6027030f71c0e8bcdaaa8c84b9d403eb1d9ee9bc2cb7ed502e8fdfbf0ea9e4688ed6cc4f568fcaf9b2a1b46cab5003559cc188303963ebbee37b5a5fd613ce91aa414162c9aecbbbb0a14a39fda4e95689410041e06b9e2c27c17bbbc457d5b3d466ffd2edc9ec033869b0373862ef5944746e996444bc52bde3ba6b53e0ab9797fd9ed1cc411b5e4c8d4e1854452cb2a547dfb87af6a839cffbf034edb5c176fdf266790f6e0511d5bfe8d4daac3e65d1a3f6bb768a4428af63cbba92ef5a31f17e6056e781983"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1, "96280c", 0xc513, 0xff, "e8e656536100b0897b344f2d546a9151fb1fb9ca9c18c9717954bf1481145a87a5ab6e1b56dbcb729c91f27b7ee0451be9315c8e17c91dd2018135d0bda7f35413d5cac8e1240589f9aea8ba13b2c50c970b048a1e0abf529b45e6a606d70e93b791b6ae6cdb84aacea26de535ee226424aa07559b9af0cafddba90dd0f0f3910206a28785f906be4cd2230e877f4cfcdb1e68e02f5310ec469c4f32f42b821b5994aa09742e4622a76db74ea8980729665f186d9bfcccd0c65fda70c879ff33add9e8f2922f6c37a54b64fdb58c31a3cbcb3e39ac837ad1898c08cbd4d3afe20a1a2b156c4fe32f9470f1d0701c4ace"}, {@any, 0x3f, 0x6, "af6c3b", 0xcf, 0x20, "8df216c5db84f75efc567858b934b4801f525aeada17deb41289a236996802e8d89e54db03bc4dfa90a261dacdbecac85524374fea3d4bb6d1e3c0292a9518e86d60056dcb3c5b9b48862780fde4df3e791dd3eaca654b14d8eda3b15b0c59b902e6a588e90f78784a3631d32e6016fd99a3176619c6cce6d9a4fdbb8e3a1aef73667ceef6b65a76ee6ad83c7f8156a836ebe3c592ccda7e52f42f56676b35fea9c0360e1a02ddb2815bee82e79c91fa6f1d8ca1b6ae934377952d0ef75a71f348e5206fcd2c6b2ce667713bba2738121127cff1ce3ffd67c7ae8113de685c89f31932316099145c44d355b46e15f9c9"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, "c06ce3", 0x4, 0x0, "7e6a1d0eed9bb700a64d5d54cc6724c0d2035d9a2015f140ea53a42cd77c01a762d964a3fdd227ca6e454f09885634d1a6efe75dc1c6fa20637d137b6e3bce60b6f74771aac89cf1b9d1f904990816369d5c44b90a285902fd3800b7c7d458c171fa86a16bf3c91676ef1892728bb06d35391b4802b7964cf110a20fe4b7548b8277ef640331011c9e49178d5a3355f5a2182d11c02458cc3de91efcecad159cbab8e8a44b97b74911e70b4799500ab87d6cb38a3c504786209ffa61137bcedf272d1aff8e3a6de7bd389645a0f2417be0dd15dc4c9abcda032e37fd0693674779530806ccaaec6b5dddd4741137a7bf"}, {@none, 0x70, 0x1f, "f8122e", 0x0, 0x4, "7c2450f4a917b9708baf8957777fe2d474a40297cd8cf0850d8ab8c833f3a98b306fd5f2e102afbdcb9a1db18aad1b21c064cee452f460698832d98fe1096052943b3aeea66d0141f5abee867924eb620010b43af8cc94ca909c663be990652933c52d4881310d55a4e435b9e0e797c200577285d11ae677bf7786288a7d44bdc257bfd38aad8958811a8229560778063fc0086341e9aec709274942d8ffd3539d85c93161ef81c88b7872fd08e13c6771d144389963e14d02155abae9d47af8bcd5dd8791edf812aa663f8e3f7c8bd6060dacb8932e40c913416e6436a6c7ca75627b31ba8827996e52fa6fcee42fc3"}, {@none, 0x4, 0x1, "09ed5e", 0x4a67, 0x3, "36ab4b634d5c71c63a836918e6e16a991505d43d16f3115f46397ba0b1913fb7034ac9bce40a1d64af84ca813dfcecb83fe22d471435bc194db8d92badbcef020ad1ff5949dc412501e742084253e048ac35036e4f5b0ebdd5b4e340921265910c8c0c2ad1465459d8c3e9343f42371c6869f03ed047971506da3d8a0297c64ca573b99e307d534a7b12531387c25e1dafa49c04c26e6943b0c54228010aad5795c4980c6a9c55b9983f7a90046f9492a99daaec8d3b50fa2d3f12b76a9fa129057a34c5428bc2ef15b0f47ecce972d181791e3abd78b7870c06fc5f6b50e3bb63842e4b1f7c523f71aa565e42081fee"}, {@any, 0x4, 0x5, "7e1cd7", 0x800, 0x1, "16b5168861409af62ea03eb2a115ed75d2e18e59dd43e39efecba3174f14c3c8e6762ad92967ce932141ae7e7841453ae0f3cfda3f76be84dcca6caaf5efc022a97f2e21f3026096b1b0b1719a80c235b4bc50379b3cdb4b93cb606dab7385bcf1c27c61ff0bd3f5112472e19bbeec5e58dccc38d491c4a7019d38b4cd6c0bf818e0e1aea8449d7f943f2600d98cabadc11dbf58d6fd8e0234d44c2b7d11916fd68b5bf2e18d9caaaa5d7d753471ec065793011030bda721c8baa4c53a41e7e35feb5c39074ff0141b712f331dd4d46179114281827ca7277f9034503f386b243659e94e60ac0ffe1bcbe91c53672345"}]}}}, 0x6f6) [ 326.657247][ T3655] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 326.657280][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 326.739132][ T4982] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 327.097813][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.109016][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.119243][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 327.128651][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.138428][ T4982] usb 4-1: config 0 descriptor?? [ 327.477330][ T4982] usbhid 4-1:0.0: can't add hid device: -71 [ 327.483376][ T4982] usbhid: probe of 4-1:0.0 failed with error -71 [ 327.495721][ T4982] usb 4-1: USB disconnect, device number 60 23:06:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x4c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x1f, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x670, 0x0, 0x5, 0x2, 0x20, 0x51}, 0xf, &(0x7f0000000780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x8c, 0x4}]}, 0x7, [{0xae, &(0x7f00000007c0)=@string={0xae, 0x3, "f91e1c5ecd026d5935c90f211613edb60552bbd60660a8ceb43207fe4ccf75d1be341cc7fb0766c9dc184bf1098b222bb05256e3098082d40efa99a0955981a766d5150bcb2ef1d5faa9ad1c407ae4393720b00f58bb50b0e43bd3a22ae85b3b33031d008b578fcda8995ed915c93ce20fe022213a64992ec94223dbf1a4ff5e0634dc4444cdac7ffd4d6fdfa1d1dcf8162c25b23d47d40608b4531b477893664e678707929d756896746c17"}}, {0x71, &(0x7f0000000880)=@string={0x71, 0x3, "cc54e10163f828a44714d528547221c6d511070ec552d6b7773fb1adf36b848e5f4b997f8f002610b31eaec03ffbe646ae2ac8d875b7bac2f17a83f639bd42bff5393102f02a686d57b49c176f63e2aa48b39a9d1473ecd5cf27d2d3edcc3388dd9c0895b722ce09e10091f5785cae"}}, {0xf6, &(0x7f0000000900)=@string={0xf6, 0x3, "96435a833b62eecb7db10de0d2340ebbe55f5d318c08494c0727d595abbfb990fcc67f4edee96bb489ba8593dd6bfb503fa4c2ed0408adf8b1c50d23c92c3a662a9a4423bd4e892716cc5c44119283ca7b6ff673f9da1ef019c06f32f78a837778f59f88f4703ed6759947f3447a14e00ba84ba6e99de26724197170599e554fd3f646e4ff6615e359b782b3ff90c545ddad39c6b49d399374ff42c941449e5161843a21ca0b11b902353f91015293d5bed5a431ca76b4c086e566b156d44d9a26800e93167d811fa20dcfd887df177079aa208221ed5d2f58c1bc8212b266d32a26b7dd4883d339dfb552ebe12545bf4fc07c3f"}}, {0xac, &(0x7f0000000a00)=@string={0xac, 0x3, "54676fe5c45cd78180f26ae6a4cdd8f8e97842cb18fe70e6f47eb4a29fa4ee1e616466d18f0e6ee3365e400f4479e1d51d5e04283c9c1b5b96225029020a5139304a38338cfb875a1d41121c22cd18ce0ec4b2c4281be7106d8b4212d7ef558773e6422e0246af4ac682d6bf5011250ffaa5e39ae24ae16680f9777396ef0adf6ccf1aee591a8f1fab399a21a1934affa89ffeaba87a4f64a78e47f7c93b3ab70e4112bee602adc6d134"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x414}}, {0x102, &(0x7f0000000b00)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000e40)={0x14, &(0x7f0000000d00)={0x20, 0x31, 0x50, {0x50, 0x21, "29e4a487f39a7918ab163a7f65326bc1117f0aadd2c91bfd1cd2ccf51e51557bb0ae2a54eacfa0c6ec3444cc3cded4265228ce75cb179549edb9f5ec7244196736165b31cde2d86b54c8eb2829d3"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000dc0)={0x0, 0x22, 0x1, {[@global]}}, &(0x7f0000000e00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x5a2}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e80)={0x0, 0x31, 0x14, "988a3e0f313a32f5af976b23d5b5af867aec48dc"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000f40)={0x20, 0x1, 0xda, "e9d61b488689368b19253236fd086aae2363e41d379e525622d1f438f3ea33f8dba96f7b8c3cf7762b76f770007c294a60ae3bd4ded225eff3e2b08810d78a496c421c9ac07779ebe3bff34e0541fe89f49bdad636c699886b00b393ab0c86f847089d38bab7b3537d91c21ad72c9fe402e3085073a2e1f493a7cbc1731a86d4ff0b1128aaac7d71954c81795a3d161b90b668bc6c67a8b5a373b2057908444d222266d10cb1f1f0b8b0ad45bb0adb2e269623c102666b790e9a2be277aa4d027a90fe2e2efb5d39c6cb91828a2d34affacab74a3a493de3d5d0"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) (async) r2 = syz_usb_connect$uac1(0x3, 0xb4, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x5, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x200, 0x6, 0x3, 0x6}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x10, "63bf10bbf6"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x4], 0x5}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x3f, "0434dada07"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x5, 0x1, "b26c9ed6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x3, 0xf}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x9b, 0x82, "0816"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0xf9, 0x80, {0x7, 0x25, 0x1, 0x80, 0x8, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x9, 0x4, {0x7, 0x25, 0x1, 0x0, 0x3f, 0xfffa}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x1, 0x9, 0xc7, 0x81}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x8, 0x1d, 0x4, 0x3f}, @generic={0x1f, 0x10, 0xa, "47383d1d2a867f79f7e093d8c157b960789e75e93f0f025baa02f08a"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x158, 0xff00, 0x101, [0x3f00, 0xc0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x67, 0x8, 0x6}, @ptm_cap={0x3}]}, 0x2, [{0x8c, &(0x7f00000002c0)=@string={0x8c, 0x3, "d0526fc2d165bcbfc257c953d9d46176b6db6ec70f44ea5d6dc8d3c0e61de24bc66a595f8c4a9f627ec57634aaf85ec1ae3f7bb3d03bd14796ae6f722bae6eea9f572b0008c3511690f9fd1fff8dcd216c8f3725c5a96a98a30ad0360d0ca7470f7395fce2bf00f897f389ad01e9267f5a2937f6c054f93b32274f3de41656a1a1bc114b76f273e75550"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000440)={0xc, &(0x7f0000000280)={0x0, 0xb, 0x5, {0x5, 0xc, "c8c607"}}, &(0x7f00000003c0)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "04de9434beadd03083e34d128c10b99db34fab5ee9d674e9f00d45bbc586aa89c95def47eac948a3637b3fbf3159b3ead251aa5d1b6a09275b0a"}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000480)={0x0, 0x0, 0x77, "3fe4928bcef50ca841726dc64b2573a66b2050720a30a3ea795854cb9c88cbc8e657459a7a3a1ed3db6d542293943a9975b2c1115d624f87c898612a253f6c33bb36cb098894083da6e376cd5b155db9ef19f0395bc4957a2999f7bf1233b24f03a8cca8e4f203457a8aeb686c9da4ec422a325bb65750"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x81, 0x3, "a77396"}, &(0x7f00000005c0)={0x20, 0x82, 0x2, '[B'}, &(0x7f0000000600)={0x20, 0x83, 0x1, 'U'}, &(0x7f0000000640)={0x20, 0x84, 0x2, "ab2e"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "1de51a"}}) 23:06:38 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x1, 0x7, 0x2}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x1, 0xc85, 0x2, 0x3ff}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x40, 0xa83, 0x4, 0x100}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x77a, 0x5}}, @l2cap_disconn_req={{0x6, 0xfe, 0x4}, {0xfffc, 0x3}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x1, 0x7, 0x2}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x1, 0xc85, 0x2, 0x3ff}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x40, 0xa83, 0x4, 0x100}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x77a, 0x5}}, @l2cap_disconn_req={{0x6, 0xfe, 0x4}, {0xfffc, 0x3}}]}}, 0x3a) (async) 23:06:38 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x0, 0x1, [{0xc9, 0x2, 0x186}]}}}, 0xc) 23:06:38 executing program 1: syz_emit_vhci(0x0, 0x0) 23:06:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:38 executing program 0: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x6f3}, {0x7, [{@any, 0x3, 0x8, "f0db5e", 0x0, 0xfb, "79b450aeef6b83a1c3d498963d8ca637d2a19add6c6c4b1ed2a66e1948ccc0a6f8789307fdab83fec6027030f71c0e8bcdaaa8c84b9d403eb1d9ee9bc2cb7ed502e8fdfbf0ea9e4688ed6cc4f568fcaf9b2a1b46cab5003559cc188303963ebbee37b5a5fd613ce91aa414162c9aecbbbb0a14a39fda4e95689410041e06b9e2c27c17bbbc457d5b3d466ffd2edc9ec033869b0373862ef5944746e996444bc52bde3ba6b53e0ab9797fd9ed1cc411b5e4c8d4e1854452cb2a547dfb87af6a839cffbf034edb5c176fdf266790f6e0511d5bfe8d4daac3e65d1a3f6bb768a4428af63cbba92ef5a31f17e6056e781983"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1, "96280c", 0xc513, 0xff, "e8e656536100b0897b344f2d546a9151fb1fb9ca9c18c9717954bf1481145a87a5ab6e1b56dbcb729c91f27b7ee0451be9315c8e17c91dd2018135d0bda7f35413d5cac8e1240589f9aea8ba13b2c50c970b048a1e0abf529b45e6a606d70e93b791b6ae6cdb84aacea26de535ee226424aa07559b9af0cafddba90dd0f0f3910206a28785f906be4cd2230e877f4cfcdb1e68e02f5310ec469c4f32f42b821b5994aa09742e4622a76db74ea8980729665f186d9bfcccd0c65fda70c879ff33add9e8f2922f6c37a54b64fdb58c31a3cbcb3e39ac837ad1898c08cbd4d3afe20a1a2b156c4fe32f9470f1d0701c4ace"}, {@any, 0x3f, 0x6, "af6c3b", 0xcf, 0x20, "8df216c5db84f75efc567858b934b4801f525aeada17deb41289a236996802e8d89e54db03bc4dfa90a261dacdbecac85524374fea3d4bb6d1e3c0292a9518e86d60056dcb3c5b9b48862780fde4df3e791dd3eaca654b14d8eda3b15b0c59b902e6a588e90f78784a3631d32e6016fd99a3176619c6cce6d9a4fdbb8e3a1aef73667ceef6b65a76ee6ad83c7f8156a836ebe3c592ccda7e52f42f56676b35fea9c0360e1a02ddb2815bee82e79c91fa6f1d8ca1b6ae934377952d0ef75a71f348e5206fcd2c6b2ce667713bba2738121127cff1ce3ffd67c7ae8113de685c89f31932316099145c44d355b46e15f9c9"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, "c06ce3", 0x4, 0x0, "7e6a1d0eed9bb700a64d5d54cc6724c0d2035d9a2015f140ea53a42cd77c01a762d964a3fdd227ca6e454f09885634d1a6efe75dc1c6fa20637d137b6e3bce60b6f74771aac89cf1b9d1f904990816369d5c44b90a285902fd3800b7c7d458c171fa86a16bf3c91676ef1892728bb06d35391b4802b7964cf110a20fe4b7548b8277ef640331011c9e49178d5a3355f5a2182d11c02458cc3de91efcecad159cbab8e8a44b97b74911e70b4799500ab87d6cb38a3c504786209ffa61137bcedf272d1aff8e3a6de7bd389645a0f2417be0dd15dc4c9abcda032e37fd0693674779530806ccaaec6b5dddd4741137a7bf"}, {@none, 0x70, 0x1f, "f8122e", 0x0, 0x4, "7c2450f4a917b9708baf8957777fe2d474a40297cd8cf0850d8ab8c833f3a98b306fd5f2e102afbdcb9a1db18aad1b21c064cee452f460698832d98fe1096052943b3aeea66d0141f5abee867924eb620010b43af8cc94ca909c663be990652933c52d4881310d55a4e435b9e0e797c200577285d11ae677bf7786288a7d44bdc257bfd38aad8958811a8229560778063fc0086341e9aec709274942d8ffd3539d85c93161ef81c88b7872fd08e13c6771d144389963e14d02155abae9d47af8bcd5dd8791edf812aa663f8e3f7c8bd6060dacb8932e40c913416e6436a6c7ca75627b31ba8827996e52fa6fcee42fc3"}, {@none, 0x4, 0x1, "09ed5e", 0x4a67, 0x3, "36ab4b634d5c71c63a836918e6e16a991505d43d16f3115f46397ba0b1913fb7034ac9bce40a1d64af84ca813dfcecb83fe22d471435bc194db8d92badbcef020ad1ff5949dc412501e742084253e048ac35036e4f5b0ebdd5b4e340921265910c8c0c2ad1465459d8c3e9343f42371c6869f03ed047971506da3d8a0297c64ca573b99e307d534a7b12531387c25e1dafa49c04c26e6943b0c54228010aad5795c4980c6a9c55b9983f7a90046f9492a99daaec8d3b50fa2d3f12b76a9fa129057a34c5428bc2ef15b0f47ecce972d181791e3abd78b7870c06fc5f6b50e3bb63842e4b1f7c523f71aa565e42081fee"}, {@any, 0x4, 0x5, "7e1cd7", 0x800, 0x1, "16b5168861409af62ea03eb2a115ed75d2e18e59dd43e39efecba3174f14c3c8e6762ad92967ce932141ae7e7841453ae0f3cfda3f76be84dcca6caaf5efc022a97f2e21f3026096b1b0b1719a80c235b4bc50379b3cdb4b93cb606dab7385bcf1c27c61ff0bd3f5112472e19bbeec5e58dccc38d491c4a7019d38b4cd6c0bf818e0e1aea8449d7f943f2600d98cabadc11dbf58d6fd8e0234d44c2b7d11916fd68b5bf2e18d9caaaa5d7d753471ec065793011030bda721c8baa4c53a41e7e35feb5c39074ff0141b712f331dd4d46179114281827ca7277f9034503f386b243659e94e60ac0ffe1bcbe91c53672345"}]}}}, 0x6f6) 23:06:38 executing program 1: syz_emit_vhci(0x0, 0x0) 23:06:38 executing program 0: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x6f3}, {0x7, [{@any, 0x3, 0x8, "f0db5e", 0x0, 0xfb, "79b450aeef6b83a1c3d498963d8ca637d2a19add6c6c4b1ed2a66e1948ccc0a6f8789307fdab83fec6027030f71c0e8bcdaaa8c84b9d403eb1d9ee9bc2cb7ed502e8fdfbf0ea9e4688ed6cc4f568fcaf9b2a1b46cab5003559cc188303963ebbee37b5a5fd613ce91aa414162c9aecbbbb0a14a39fda4e95689410041e06b9e2c27c17bbbc457d5b3d466ffd2edc9ec033869b0373862ef5944746e996444bc52bde3ba6b53e0ab9797fd9ed1cc411b5e4c8d4e1854452cb2a547dfb87af6a839cffbf034edb5c176fdf266790f6e0511d5bfe8d4daac3e65d1a3f6bb768a4428af63cbba92ef5a31f17e6056e781983"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1, "96280c", 0xc513, 0xff, "e8e656536100b0897b344f2d546a9151fb1fb9ca9c18c9717954bf1481145a87a5ab6e1b56dbcb729c91f27b7ee0451be9315c8e17c91dd2018135d0bda7f35413d5cac8e1240589f9aea8ba13b2c50c970b048a1e0abf529b45e6a606d70e93b791b6ae6cdb84aacea26de535ee226424aa07559b9af0cafddba90dd0f0f3910206a28785f906be4cd2230e877f4cfcdb1e68e02f5310ec469c4f32f42b821b5994aa09742e4622a76db74ea8980729665f186d9bfcccd0c65fda70c879ff33add9e8f2922f6c37a54b64fdb58c31a3cbcb3e39ac837ad1898c08cbd4d3afe20a1a2b156c4fe32f9470f1d0701c4ace"}, {@any, 0x3f, 0x6, "af6c3b", 0xcf, 0x20, "8df216c5db84f75efc567858b934b4801f525aeada17deb41289a236996802e8d89e54db03bc4dfa90a261dacdbecac85524374fea3d4bb6d1e3c0292a9518e86d60056dcb3c5b9b48862780fde4df3e791dd3eaca654b14d8eda3b15b0c59b902e6a588e90f78784a3631d32e6016fd99a3176619c6cce6d9a4fdbb8e3a1aef73667ceef6b65a76ee6ad83c7f8156a836ebe3c592ccda7e52f42f56676b35fea9c0360e1a02ddb2815bee82e79c91fa6f1d8ca1b6ae934377952d0ef75a71f348e5206fcd2c6b2ce667713bba2738121127cff1ce3ffd67c7ae8113de685c89f31932316099145c44d355b46e15f9c9"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, "c06ce3", 0x4, 0x0, "7e6a1d0eed9bb700a64d5d54cc6724c0d2035d9a2015f140ea53a42cd77c01a762d964a3fdd227ca6e454f09885634d1a6efe75dc1c6fa20637d137b6e3bce60b6f74771aac89cf1b9d1f904990816369d5c44b90a285902fd3800b7c7d458c171fa86a16bf3c91676ef1892728bb06d35391b4802b7964cf110a20fe4b7548b8277ef640331011c9e49178d5a3355f5a2182d11c02458cc3de91efcecad159cbab8e8a44b97b74911e70b4799500ab87d6cb38a3c504786209ffa61137bcedf272d1aff8e3a6de7bd389645a0f2417be0dd15dc4c9abcda032e37fd0693674779530806ccaaec6b5dddd4741137a7bf"}, {@none, 0x70, 0x1f, "f8122e", 0x0, 0x4, "7c2450f4a917b9708baf8957777fe2d474a40297cd8cf0850d8ab8c833f3a98b306fd5f2e102afbdcb9a1db18aad1b21c064cee452f460698832d98fe1096052943b3aeea66d0141f5abee867924eb620010b43af8cc94ca909c663be990652933c52d4881310d55a4e435b9e0e797c200577285d11ae677bf7786288a7d44bdc257bfd38aad8958811a8229560778063fc0086341e9aec709274942d8ffd3539d85c93161ef81c88b7872fd08e13c6771d144389963e14d02155abae9d47af8bcd5dd8791edf812aa663f8e3f7c8bd6060dacb8932e40c913416e6436a6c7ca75627b31ba8827996e52fa6fcee42fc3"}, {@none, 0x4, 0x1, "09ed5e", 0x4a67, 0x3, "36ab4b634d5c71c63a836918e6e16a991505d43d16f3115f46397ba0b1913fb7034ac9bce40a1d64af84ca813dfcecb83fe22d471435bc194db8d92badbcef020ad1ff5949dc412501e742084253e048ac35036e4f5b0ebdd5b4e340921265910c8c0c2ad1465459d8c3e9343f42371c6869f03ed047971506da3d8a0297c64ca573b99e307d534a7b12531387c25e1dafa49c04c26e6943b0c54228010aad5795c4980c6a9c55b9983f7a90046f9492a99daaec8d3b50fa2d3f12b76a9fa129057a34c5428bc2ef15b0f47ecce972d181791e3abd78b7870c06fc5f6b50e3bb63842e4b1f7c523f71aa565e42081fee"}, {@any, 0x4, 0x5, "7e1cd7", 0x800, 0x1, "16b5168861409af62ea03eb2a115ed75d2e18e59dd43e39efecba3174f14c3c8e6762ad92967ce932141ae7e7841453ae0f3cfda3f76be84dcca6caaf5efc022a97f2e21f3026096b1b0b1719a80c235b4bc50379b3cdb4b93cb606dab7385bcf1c27c61ff0bd3f5112472e19bbeec5e58dccc38d491c4a7019d38b4cd6c0bf818e0e1aea8449d7f943f2600d98cabadc11dbf58d6fd8e0234d44c2b7d11916fd68b5bf2e18d9caaaa5d7d753471ec065793011030bda721c8baa4c53a41e7e35feb5c39074ff0141b712f331dd4d46179114281827ca7277f9034503f386b243659e94e60ac0ffe1bcbe91c53672345"}]}}}, 0x6f6) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x6f3}, {0x7, [{@any, 0x3, 0x8, "f0db5e", 0x0, 0xfb, "79b450aeef6b83a1c3d498963d8ca637d2a19add6c6c4b1ed2a66e1948ccc0a6f8789307fdab83fec6027030f71c0e8bcdaaa8c84b9d403eb1d9ee9bc2cb7ed502e8fdfbf0ea9e4688ed6cc4f568fcaf9b2a1b46cab5003559cc188303963ebbee37b5a5fd613ce91aa414162c9aecbbbb0a14a39fda4e95689410041e06b9e2c27c17bbbc457d5b3d466ffd2edc9ec033869b0373862ef5944746e996444bc52bde3ba6b53e0ab9797fd9ed1cc411b5e4c8d4e1854452cb2a547dfb87af6a839cffbf034edb5c176fdf266790f6e0511d5bfe8d4daac3e65d1a3f6bb768a4428af63cbba92ef5a31f17e6056e781983"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1, "96280c", 0xc513, 0xff, "e8e656536100b0897b344f2d546a9151fb1fb9ca9c18c9717954bf1481145a87a5ab6e1b56dbcb729c91f27b7ee0451be9315c8e17c91dd2018135d0bda7f35413d5cac8e1240589f9aea8ba13b2c50c970b048a1e0abf529b45e6a606d70e93b791b6ae6cdb84aacea26de535ee226424aa07559b9af0cafddba90dd0f0f3910206a28785f906be4cd2230e877f4cfcdb1e68e02f5310ec469c4f32f42b821b5994aa09742e4622a76db74ea8980729665f186d9bfcccd0c65fda70c879ff33add9e8f2922f6c37a54b64fdb58c31a3cbcb3e39ac837ad1898c08cbd4d3afe20a1a2b156c4fe32f9470f1d0701c4ace"}, {@any, 0x3f, 0x6, "af6c3b", 0xcf, 0x20, "8df216c5db84f75efc567858b934b4801f525aeada17deb41289a236996802e8d89e54db03bc4dfa90a261dacdbecac85524374fea3d4bb6d1e3c0292a9518e86d60056dcb3c5b9b48862780fde4df3e791dd3eaca654b14d8eda3b15b0c59b902e6a588e90f78784a3631d32e6016fd99a3176619c6cce6d9a4fdbb8e3a1aef73667ceef6b65a76ee6ad83c7f8156a836ebe3c592ccda7e52f42f56676b35fea9c0360e1a02ddb2815bee82e79c91fa6f1d8ca1b6ae934377952d0ef75a71f348e5206fcd2c6b2ce667713bba2738121127cff1ce3ffd67c7ae8113de685c89f31932316099145c44d355b46e15f9c9"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, "c06ce3", 0x4, 0x0, "7e6a1d0eed9bb700a64d5d54cc6724c0d2035d9a2015f140ea53a42cd77c01a762d964a3fdd227ca6e454f09885634d1a6efe75dc1c6fa20637d137b6e3bce60b6f74771aac89cf1b9d1f904990816369d5c44b90a285902fd3800b7c7d458c171fa86a16bf3c91676ef1892728bb06d35391b4802b7964cf110a20fe4b7548b8277ef640331011c9e49178d5a3355f5a2182d11c02458cc3de91efcecad159cbab8e8a44b97b74911e70b4799500ab87d6cb38a3c504786209ffa61137bcedf272d1aff8e3a6de7bd389645a0f2417be0dd15dc4c9abcda032e37fd0693674779530806ccaaec6b5dddd4741137a7bf"}, {@none, 0x70, 0x1f, "f8122e", 0x0, 0x4, "7c2450f4a917b9708baf8957777fe2d474a40297cd8cf0850d8ab8c833f3a98b306fd5f2e102afbdcb9a1db18aad1b21c064cee452f460698832d98fe1096052943b3aeea66d0141f5abee867924eb620010b43af8cc94ca909c663be990652933c52d4881310d55a4e435b9e0e797c200577285d11ae677bf7786288a7d44bdc257bfd38aad8958811a8229560778063fc0086341e9aec709274942d8ffd3539d85c93161ef81c88b7872fd08e13c6771d144389963e14d02155abae9d47af8bcd5dd8791edf812aa663f8e3f7c8bd6060dacb8932e40c913416e6436a6c7ca75627b31ba8827996e52fa6fcee42fc3"}, {@none, 0x4, 0x1, "09ed5e", 0x4a67, 0x3, "36ab4b634d5c71c63a836918e6e16a991505d43d16f3115f46397ba0b1913fb7034ac9bce40a1d64af84ca813dfcecb83fe22d471435bc194db8d92badbcef020ad1ff5949dc412501e742084253e048ac35036e4f5b0ebdd5b4e340921265910c8c0c2ad1465459d8c3e9343f42371c6869f03ed047971506da3d8a0297c64ca573b99e307d534a7b12531387c25e1dafa49c04c26e6943b0c54228010aad5795c4980c6a9c55b9983f7a90046f9492a99daaec8d3b50fa2d3f12b76a9fa129057a34c5428bc2ef15b0f47ecce972d181791e3abd78b7870c06fc5f6b50e3bb63842e4b1f7c523f71aa565e42081fee"}, {@any, 0x4, 0x5, "7e1cd7", 0x800, 0x1, "16b5168861409af62ea03eb2a115ed75d2e18e59dd43e39efecba3174f14c3c8e6762ad92967ce932141ae7e7841453ae0f3cfda3f76be84dcca6caaf5efc022a97f2e21f3026096b1b0b1719a80c235b4bc50379b3cdb4b93cb606dab7385bcf1c27c61ff0bd3f5112472e19bbeec5e58dccc38d491c4a7019d38b4cd6c0bf818e0e1aea8449d7f943f2600d98cabadc11dbf58d6fd8e0234d44c2b7d11916fd68b5bf2e18d9caaaa5d7d753471ec065793011030bda721c8baa4c53a41e7e35feb5c39074ff0141b712f331dd4d46179114281827ca7277f9034503f386b243659e94e60ac0ffe1bcbe91c53672345"}]}}}, 0x6f6) (async) 23:06:38 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000012c0), 0x9, 0x80) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="290300000000000000002000000008000600", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_KEK={0x12, 0xf2, "89b3cf14cea71e935158849cd6a8"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x8001) pidfd_getfd(r2, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0x82, 0x3b, &(0x7f0000000080)="caad4e6c292dd14c2f4f63266224399079d345c2be3af3b7bf318f93306aab7764000eb3ca8e156a2004d84314a1bb68394393bdeaa6fea7b6ae97ebfb4fb336efafb81e941c823d1b4ebef4efaa3a93dddce8220ccc3c7ecb09e5241b01cfc4b39fa55bbfab7f52d61afa99e92b51a4f0f0fc20adfb4e0267ac32784cafa2512cc5", &(0x7f0000000000)=""/59, 0x80000000, 0x0, 0xb3, 0x1006, &(0x7f0000000140)="364029c9980845b294a9ffd5620f8da30628dfd78f38930f079feed2fcf172f36ab70ba77beb298c002cb79e0c59826e863a6b2b5c6fc6584b8764e70a3ed32dfead0a2d641be9a9a9380ec3eee5cfd12d433cdf53d8b09d1e3cccc84d3042a9712a0222d1d319acfcbe31f9d48fac477376bdc06851bc3fb4df6a543fcfce3bcb4dc5501c54dbb691a58bcef2c4f4f1c4e302277ee7735756e3c32ec3e3cb83f71fa896b4aa27abb4d6018996cbfd7d1da5ef", &(0x7f0000000200)="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", 0x0, 0x3}, 0x48) syz_emit_vhci(&(0x7f0000001280)=ANY=[@ANYBLOB="043e0c047fc800da0ec310d20aadfa33ae26ece23646d30f8929162ea75a258923a5e337eab7"], 0xf) 23:06:38 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) (async) 23:06:38 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x0, 0x1, [{0xc9, 0x2, 0x186}]}}}, 0xc) [ 327.918900][ T3655] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 327.918934][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 327.984046][ T3655] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 327.984079][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:38 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0x0, "da0ec312d20aadfa"}}}}, 0xf) [ 328.287268][ T4982] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 328.647507][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.658569][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.668580][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 328.677753][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.689244][ T4982] usb 4-1: config 0 descriptor?? [ 328.929890][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.938808][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.953831][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.963318][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.020592][ T4982] ortek 0003:05A4:2000.000D: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 329.220460][ T4982] usb 4-1: USB disconnect, device number 61 23:06:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a98174964f4036d8da4287"], 0x0}, 0x0) 23:06:39 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f00000012c0), 0x9, 0x80) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="290300000000000000002000000008000600", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1) (async) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_KEK={0x12, 0xf2, "89b3cf14cea71e935158849cd6a8"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x8001) (async) pidfd_getfd(r2, r1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0x82, 0x3b, &(0x7f0000000080)="caad4e6c292dd14c2f4f63266224399079d345c2be3af3b7bf318f93306aab7764000eb3ca8e156a2004d84314a1bb68394393bdeaa6fea7b6ae97ebfb4fb336efafb81e941c823d1b4ebef4efaa3a93dddce8220ccc3c7ecb09e5241b01cfc4b39fa55bbfab7f52d61afa99e92b51a4f0f0fc20adfb4e0267ac32784cafa2512cc5", &(0x7f0000000000)=""/59, 0x80000000, 0x0, 0xb3, 0x1006, &(0x7f0000000140)="364029c9980845b294a9ffd5620f8da30628dfd78f38930f079feed2fcf172f36ab70ba77beb298c002cb79e0c59826e863a6b2b5c6fc6584b8764e70a3ed32dfead0a2d641be9a9a9380ec3eee5cfd12d433cdf53d8b09d1e3cccc84d3042a9712a0222d1d319acfcbe31f9d48fac477376bdc06851bc3fb4df6a543fcfce3bcb4dc5501c54dbb691a58bcef2c4f4f1c4e302277ee7735756e3c32ec3e3cb83f71fa896b4aa27abb4d6018996cbfd7d1da5ef", &(0x7f0000000200)="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", 0x0, 0x3}, 0x48) (async) syz_emit_vhci(&(0x7f0000001280)=ANY=[@ANYBLOB="043e0c047fc800da0ec310d20aadfa33ae26ece23646d30f8929162ea75a258923a5e337eab7"], 0xf) 23:06:39 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) (async) 23:06:39 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = fanotify_init(0x20, 0x401) close(r1) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x10000, 0x3f, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) 23:06:39 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x1}}}}, 0x9) 23:06:39 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0x0, "da0ec312d20aadfa"}}}}, 0xf) 23:06:39 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x1}}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x1}}}}, 0x9) (async) 23:06:40 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x0, 0x0, "da0ec312d20aadfa"}}}}, 0xf) [ 329.753721][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:40 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 23:06:40 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = fanotify_init(0x20, 0x401) close(r1) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x10000, 0x3f, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) fanotify_init(0x20, 0x401) (async) close(r1) (async) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x10000, 0x3f, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r4}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) (async) 23:06:40 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:40 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000012c0), 0x9, 0x80) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="290300000000000000002000000008000600", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_KEK={0x12, 0xf2, "89b3cf14cea71e935158849cd6a8"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x8001) pidfd_getfd(r2, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0x82, 0x3b, &(0x7f0000000080)="caad4e6c292dd14c2f4f63266224399079d345c2be3af3b7bf318f93306aab7764000eb3ca8e156a2004d84314a1bb68394393bdeaa6fea7b6ae97ebfb4fb336efafb81e941c823d1b4ebef4efaa3a93dddce8220ccc3c7ecb09e5241b01cfc4b39fa55bbfab7f52d61afa99e92b51a4f0f0fc20adfb4e0267ac32784cafa2512cc5", &(0x7f0000000000)=""/59, 0x80000000, 0x0, 0xb3, 0x1006, &(0x7f0000000140)="364029c9980845b294a9ffd5620f8da30628dfd78f38930f079feed2fcf172f36ab70ba77beb298c002cb79e0c59826e863a6b2b5c6fc6584b8764e70a3ed32dfead0a2d641be9a9a9380ec3eee5cfd12d433cdf53d8b09d1e3cccc84d3042a9712a0222d1d319acfcbe31f9d48fac477376bdc06851bc3fb4df6a543fcfce3bcb4dc5501c54dbb691a58bcef2c4f4f1c4e302277ee7735756e3c32ec3e3cb83f71fa896b4aa27abb4d6018996cbfd7d1da5ef", &(0x7f0000000200)="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", 0x0, 0x3}, 0x48) syz_emit_vhci(&(0x7f0000001280)=ANY=[@ANYBLOB="043e0c047fc800da0ec310d20aadfa33ae26ece23646d30f8929162ea75a258923a5e337eab7"], 0xf) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f00000012c0), 0x9, 0x80) (async) bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="290300000000000000002000000008000600", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x1) (async) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_KEK={0x12, 0xf2, "89b3cf14cea71e935158849cd6a8"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x8001) (async) pidfd_getfd(r2, r1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x0, 0x82, 0x3b, &(0x7f0000000080)="caad4e6c292dd14c2f4f63266224399079d345c2be3af3b7bf318f93306aab7764000eb3ca8e156a2004d84314a1bb68394393bdeaa6fea7b6ae97ebfb4fb336efafb81e941c823d1b4ebef4efaa3a93dddce8220ccc3c7ecb09e5241b01cfc4b39fa55bbfab7f52d61afa99e92b51a4f0f0fc20adfb4e0267ac32784cafa2512cc5", &(0x7f0000000000)=""/59, 0x80000000, 0x0, 0xb3, 0x1006, &(0x7f0000000140)="364029c9980845b294a9ffd5620f8da30628dfd78f38930f079feed2fcf172f36ab70ba77beb298c002cb79e0c59826e863a6b2b5c6fc6584b8764e70a3ed32dfead0a2d641be9a9a9380ec3eee5cfd12d433cdf53d8b09d1e3cccc84d3042a9712a0222d1d319acfcbe31f9d48fac477376bdc06851bc3fb4df6a543fcfce3bcb4dc5501c54dbb691a58bcef2c4f4f1c4e302277ee7735756e3c32ec3e3cb83f71fa896b4aa27abb4d6018996cbfd7d1da5ef", &(0x7f0000000200)="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", 0x0, 0x3}, 0x48) (async) syz_emit_vhci(&(0x7f0000001280)=ANY=[@ANYBLOB="043e0c047fc800da0ec310d20aadfa33ae26ece23646d30f8929162ea75a258923a5e337eab7"], 0xf) (async) [ 329.855831][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 329.868376][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 330.084395][ T4982] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 330.447472][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.458467][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.468293][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 330.477679][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.493529][ T4982] usb 4-1: config 0 descriptor?? [ 331.037358][ T4982] usbhid 4-1:0.0: can't add hid device: -71 [ 331.043429][ T4982] usbhid: probe of 4-1:0.0 failed with error -71 [ 331.052275][ T4982] usb 4-1: USB disconnect, device number 62 23:06:41 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 23:06:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:41 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x1}}}}, 0x9) 23:06:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r1 = fanotify_init(0x20, 0x401) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x10000, 0x3f, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r4}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) (rerun: 64) 23:06:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a98174964f4036d8da4287"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a98174964f4036d8da4287"], 0x0}, 0x0) (async) 23:06:41 executing program 5: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x6, 0x0, {0xffffffffffffffff}, {r0}, 0x80000001}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x20c, {0x10, 0x2, 0x4}, 0x4, r0, 0xee01, 0x2, 0x3f36, 0x2, 0x6a, 0xffffffff, 0x10000100000001, 0xfffffffffffffffd, 0x6cf2, 0x9, 0xfffffffffffffffe, 0x3, 0xfb, 0x7ffffffffffffffc, 0xa6, 0x7}}, 0xa0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c047fc8be1b3d655a4356cbfa"], 0xf) 23:06:41 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04222e83aaaaaaaaaa00000700caf9dc000000000000008000000000bef172000000aaaaaaaaaa000000000f110f00000016d7bcb53f48440a8a"], 0x7e) [ 331.486907][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:41 executing program 5: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x6, 0x0, {0xffffffffffffffff}, {r0}, 0x80000001}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x20c, {0x10, 0x2, 0x4}, 0x4, r0, 0xee01, 0x2, 0x3f36, 0x2, 0x6a, 0xffffffff, 0x10000100000001, 0xfffffffffffffffd, 0x6cf2, 0x9, 0xfffffffffffffffe, 0x3, 0xfb, 0x7ffffffffffffffc, 0xa6, 0x7}}, 0xa0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c047fc8be1b3d655a4356cbfa"], 0xf) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x6, 0x0, {0xffffffffffffffff}, {r0}, 0x80000001}) (async) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x20c, {0x10, 0x2, 0x4}, 0x4, r0, 0xee01, 0x2, 0x3f36, 0x2, 0x6a, 0xffffffff, 0x10000100000001, 0xfffffffffffffffd, 0x6cf2, 0x9, 0xfffffffffffffffe, 0x3, 0xfb, 0x7ffffffffffffffc, 0xa6, 0x7}}, 0xa0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c047fc8be1b3d655a4356cbfa"], 0xf) (async) 23:06:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:41 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04222e83aaaaaaaaaa00000700caf9dc000000000000008000000000bef172000000aaaaaaaaaa000000000f110f00000016d7bcb53f48440a8a"], 0x7e) 23:06:41 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) [ 331.536524][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="045403000000eb8d92197458a17ac2cc886183fcd420e644ee96e89cfc3e4c6654f12bfabeed41", @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r2, @ANYRESDEC=r2], 0x6) 23:06:41 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04222e83aaaaaaaaaa00000700caf9dc000000000000008000000000bef172000000aaaaaaaaaa000000000f110f00000016d7bcb53f48440a8a"], 0x7e) [ 331.624514][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:41 executing program 5: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x6, 0x0, {0xffffffffffffffff}, {r0}, 0x80000001}) (async, rerun: 64) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x20c, {0x10, 0x2, 0x4}, 0x4, r0, 0xee01, 0x2, 0x3f36, 0x2, 0x6a, 0xffffffff, 0x10000100000001, 0xfffffffffffffffd, 0x6cf2, 0x9, 0xfffffffffffffffe, 0x3, 0xfb, 0x7ffffffffffffffc, 0xa6, 0x7}}, 0xa0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c047fc8be1b3d655a4356cbfa"], 0xf) 23:06:41 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:41 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04fa2d0c047fc83900000000000000fa"], 0xf) [ 331.753639][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 332.017376][ T3724] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 332.377346][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.388399][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.398547][ T3724] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 332.407815][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.423871][ T3724] usb 4-1: config 0 descriptor?? [ 332.900176][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.909119][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.017673][ T3724] usbhid 4-1:0.0: can't add hid device: -71 [ 333.023680][ T3724] usbhid: probe of 4-1:0.0 failed with error -71 [ 333.036751][ T3724] usb 4-1: USB disconnect, device number 63 23:06:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a98174964f4036d8da4287"], 0x0}, 0x0) (rerun: 64) 23:06:43 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x40, 0x4, 0x6}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:43 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04fa2d0c047fc83900000000000000fa"], 0xf) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04fa2d0c047fc83900000000000000fa"], 0xf) (async) 23:06:43 executing program 0: r0 = socket$isdn(0x22, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x505b, 0x4) 23:06:43 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="045403000000eb8d92197458a17ac2cc886183fcd420e644ee96e89cfc3e4c6654f12bfabeed41", @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r2, @ANYRESDEC=r2], 0x6) (rerun: 64) 23:06:43 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:43 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x40, 0x4, 0x6}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x40, 0x4, 0x6}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) 23:06:43 executing program 0: r0 = socket$isdn(0x22, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x505b, 0x4) 23:06:43 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04fa2d0c047fc83900000000000000fa"], 0xf) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04fa2d0c047fc83900000000000000fa"], 0xf) (async) 23:06:43 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:43 executing program 0: r0 = socket$isdn(0x22, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x505b, 0x4) socket$isdn(0x22, 0x3, 0x1) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x505b, 0x4) (async) [ 333.937324][ T23] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 334.317378][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.328415][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.338472][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 334.347993][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.357985][ T23] usb 4-1: config 0 descriptor?? [ 334.777354][ T23] usbhid 4-1:0.0: can't add hid device: -32 [ 334.783381][ T23] usbhid: probe of 4-1:0.0 failed with error -32 23:06:46 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="046533047fc800da0ec312d20aadfa"], 0xf) 23:06:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x40, 0x4, 0x6}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:46 executing program 1: syz_emit_vhci(0x0, 0x0) 23:06:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="045403000000eb8d92197458a17ac2cc886183fcd420e644ee96e89cfc3e4c6654f12bfabeed41", @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r2, @ANYRESDEC=r2], 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="045403000000eb8d92197458a17ac2cc886183fcd420e644ee96e89cfc3e4c6654f12bfabeed41", @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r2, @ANYRESDEC=r2], 0x6) (async) 23:06:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x6666, 0x8802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x8ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x94, 0xfa, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x5, 0xff}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x4995ee99d5c28dc, 0x9, 0x5, 0x2, 0x10, 0x6}, 0xf, &(0x7f0000000480)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1f, 0x6b, 0x5}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x27, {0x27, 0x8, "8ee2367fffc84c483c3cddc31a206243c899bb989af1f2a2b4fbcdeb6866622f677a0fa223"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000100)={0x0, 0x22, 0x12, {[@local=@item_012={0x0, 0x2, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "3d481614"}, @main=@item_4={0x3, 0x0, 0xb, "fc996e95"}, @main=@item_4={0x3, 0x0, 0x9, "08f5460d"}, @global=@item_012={0x1, 0x1, 0x7, "a7"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe00, 0x1f, 0x1, {0x22, 0x33b}}}}, &(0x7f00000003c0)={0x18, &(0x7f0000000200)={0x40, 0x17, 0xb1, "06ec27f18bf91f709ce8cd213e26db60373aea7de5a14d528f6271091eb4570a3aabb49cdf832524d5ab47aa160e14f99bac01f7165b56989787a1dc82b060a9f40b3409e903cf0a147cf238e72b9a188bdc9ee79063dfd9608246d0004e9881e6678e285f1c82deee315efa73cb6ab6ea2c6863ba65bafd3218da1957efda5b84175aeacc7a408122610a1191e3f112cdee51dd969b48bdcbdb53d7cac9d423e7524b67f0c11d16e8a954c3ec66c3456f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x1, 0x39, "14d5ec3cbeab536a5c3a5081c2e4d633cda6b1aa54fcce8ea68948ea584af80121c110006c7284e7c96f6b456ae3ab227b557567c48d1ef985"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) 23:06:46 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, 0x13, 0x7e349a97787db00b, 0x70bd2c, 0x25dfdbfc, {0x34, 0x6, 0x1, 0x4, {0x4e21, 0x4e22, [0x8, 0x4, 0x5, 0x8], [0x4, 0x2, 0x6, 0x3], 0x0, [0x9]}, 0x0, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "db36e2958a8429d09fb38e4e8951a936868a89f06f8d782eecc9860fe39fb9755a277d8e2bb0a292828f8d087b242157c0d9f2289218abb4b3b71bd3cbf4d7a18905d59edd1b0f3fb37fa62403b96b30df29bd9a929ecf7e86464df53904f523c27d2a5f742feb18bcc3dbfa1fb448d52f9747ae648645c4b98b3bac1fc43c98583d961b2d30e299cdd468518ab2f968d238644bae65b0a1a88a30f8b09a9c282273a48c0879de1cf5dc92d12df1f53d1f13e787ad8f7aae013796"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x804}, 0x4) r2 = dup(0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="06052abd7000ffdbdf251300000050000680080001000900000008000600030000003c00040067636d286165732900000000000000000000000000000000000000000000000014000000ef240ba5132914be6d807ed39a0c5abafe8ec868a4000180080003000400000044000400200001000a004e2400000048fe8000000000000000000000000000bbac2f0000200002000a004e2100000a30fc000000000000000000000000000000020000003c000280080003000800000008000200ffffffff080003000004000008000100140000000800020003000000080003000100000008000400b20e00000800030008000000080003000400000008000300a7000000580005801c0002800800030006000000080001000300000008000100110000001c0002800800040003000000080003000101000008000200070000001c000280080003000400000008000100180000000800040006000000"], 0x160}, 0x1, 0x0, 0x0, 0x8001}, 0x8d0) 23:06:46 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, 0x13, 0x7e349a97787db00b, 0x70bd2c, 0x25dfdbfc, {0x34, 0x6, 0x1, 0x4, {0x4e21, 0x4e22, [0x8, 0x4, 0x5, 0x8], [0x4, 0x2, 0x6, 0x3], 0x0, [0x9]}, 0x0, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "db36e2958a8429d09fb38e4e8951a936868a89f06f8d782eecc9860fe39fb9755a277d8e2bb0a292828f8d087b242157c0d9f2289218abb4b3b71bd3cbf4d7a18905d59edd1b0f3fb37fa62403b96b30df29bd9a929ecf7e86464df53904f523c27d2a5f742feb18bcc3dbfa1fb448d52f9747ae648645c4b98b3bac1fc43c98583d961b2d30e299cdd468518ab2f968d238644bae65b0a1a88a30f8b09a9c282273a48c0879de1cf5dc92d12df1f53d1f13e787ad8f7aae013796"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x804}, 0x4) r2 = dup(0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x8001}, 0x8d0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, 0x13, 0x7e349a97787db00b, 0x70bd2c, 0x25dfdbfc, {0x34, 0x6, 0x1, 0x4, {0x4e21, 0x4e22, [0x8, 0x4, 0x5, 0x8], [0x4, 0x2, 0x6, 0x3], 0x0, [0x9]}, 0x0, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "db36e2958a8429d09fb38e4e8951a936868a89f06f8d782eecc9860fe39fb9755a277d8e2bb0a292828f8d087b242157c0d9f2289218abb4b3b71bd3cbf4d7a18905d59edd1b0f3fb37fa62403b96b30df29bd9a929ecf7e86464df53904f523c27d2a5f742feb18bcc3dbfa1fb448d52f9747ae648645c4b98b3bac1fc43c98583d961b2d30e299cdd468518ab2f968d238644bae65b0a1a88a30f8b09a9c282273a48c0879de1cf5dc92d12df1f53d1f13e787ad8f7aae013796"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x804}, 0x4) (async) dup(0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x8001}, 0x8d0) (async) 23:06:46 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="046533047fc800da0ec312d20aadfa"], 0xf) 23:06:46 executing program 1: syz_emit_vhci(0x0, 0x0) 23:06:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 336.651752][ T23] usb 4-1: USB disconnect, device number 64 23:06:47 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="046533047fc800da0ec312d20aadfa"], 0xf) 23:06:47 executing program 1: syz_emit_vhci(0x0, 0x0) 23:06:47 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:47 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, 0x13, 0x7e349a97787db00b, 0x70bd2c, 0x25dfdbfc, {0x34, 0x6, 0x1, 0x4, {0x4e21, 0x4e22, [0x8, 0x4, 0x5, 0x8], [0x4, 0x2, 0x6, 0x3], 0x0, [0x9]}, 0x0, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "db36e2958a8429d09fb38e4e8951a936868a89f06f8d782eecc9860fe39fb9755a277d8e2bb0a292828f8d087b242157c0d9f2289218abb4b3b71bd3cbf4d7a18905d59edd1b0f3fb37fa62403b96b30df29bd9a929ecf7e86464df53904f523c27d2a5f742feb18bcc3dbfa1fb448d52f9747ae648645c4b98b3bac1fc43c98583d961b2d30e299cdd468518ab2f968d238644bae65b0a1a88a30f8b09a9c282273a48c0879de1cf5dc92d12df1f53d1f13e787ad8f7aae013796"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x804}, 0x4) r2 = dup(0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x8001}, 0x8d0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, 0x13, 0x7e349a97787db00b, 0x70bd2c, 0x25dfdbfc, {0x34, 0x6, 0x1, 0x4, {0x4e21, 0x4e22, [0x8, 0x4, 0x5, 0x8], [0x4, 0x2, 0x6, 0x3], 0x0, [0x9]}, 0x0, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "db36e2958a8429d09fb38e4e8951a936868a89f06f8d782eecc9860fe39fb9755a277d8e2bb0a292828f8d087b242157c0d9f2289218abb4b3b71bd3cbf4d7a18905d59edd1b0f3fb37fa62403b96b30df29bd9a929ecf7e86464df53904f523c27d2a5f742feb18bcc3dbfa1fb448d52f9747ae648645c4b98b3bac1fc43c98583d961b2d30e299cdd468518ab2f968d238644bae65b0a1a88a30f8b09a9c282273a48c0879de1cf5dc92d12df1f53d1f13e787ad8f7aae013796"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x804}, 0x4) (async) dup(0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x8001}, 0x8d0) (async) 23:06:47 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 337.117363][ T23] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 337.527486][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.538480][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.548449][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 337.557653][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.567781][ T23] usb 4-1: config 0 descriptor?? [ 338.039409][ T23] ortek 0003:05A4:2000.000E: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 338.242369][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.253653][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:06:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x6666, 0x8802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x8ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x94, 0xfa, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x5, 0xff}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x4995ee99d5c28dc, 0x9, 0x5, 0x2, 0x10, 0x6}, 0xf, &(0x7f0000000480)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1f, 0x6b, 0x5}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x27, {0x27, 0x8, "8ee2367fffc84c483c3cddc31a206243c899bb989af1f2a2b4fbcdeb6866622f677a0fa223"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000100)={0x0, 0x22, 0x12, {[@local=@item_012={0x0, 0x2, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "3d481614"}, @main=@item_4={0x3, 0x0, 0xb, "fc996e95"}, @main=@item_4={0x3, 0x0, 0x9, "08f5460d"}, @global=@item_012={0x1, 0x1, 0x7, "a7"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe00, 0x1f, 0x1, {0x22, 0x33b}}}}, &(0x7f00000003c0)={0x18, &(0x7f0000000200)={0x40, 0x17, 0xb1, "06ec27f18bf91f709ce8cd213e26db60373aea7de5a14d528f6271091eb4570a3aabb49cdf832524d5ab47aa160e14f99bac01f7165b56989787a1dc82b060a9f40b3409e903cf0a147cf238e72b9a188bdc9ee79063dfd9608246d0004e9881e6678e285f1c82deee315efa73cb6ab6ea2c6863ba65bafd3218da1957efda5b84175aeacc7a408122610a1191e3f112cdee51dd969b48bdcbdb53d7cac9d423e7524b67f0c11d16e8a954c3ec66c3456f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x1, 0x39, "14d5ec3cbeab536a5c3a5081c2e4d633cda6b1aa54fcce8ea68948ea584af80121c110006c7284e7c96f6b456ae3ab227b557567c48d1ef985"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) (rerun: 32) 23:06:49 executing program 0: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x400045, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:49 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1f, 0xc8, 0x81}}}, 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x2}}}, 0x8) 23:06:49 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:49 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:06:49 executing program 2: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$amidi(&(0x7f0000000080), 0xc67, 0x8000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$damon_init_regions(r1, &(0x7f0000000040)={{}, {' ', 0xa704}, {' ', 0x8}}, 0x3f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x300100}, 0xc, &(0x7f0000000840)={&(0x7f0000000440)={0x3e0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5a46, 0xfe, 0x6, 0x9}, {0x7c5a, 0x1, 0x7, 0x1}, {0x7, 0xde, 0x6, 0x1}, {0xfffc, 0x7, 0x1f, 0x77f5fa91}, {0x8000, 0x8, 0x7, 0x7}, {0x0, 0x40, 0x2, 0x80000001}, {0x1f, 0x7f, 0x7f, 0x2}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x0, 0x5, 0x7f5}, {0xfff, 0x0, 0x6d, 0x6}, {0x8001, 0x4d, 0x40, 0x9}, {0xfeff, 0x78, 0x1, 0x10000}, {0x81, 0x3, 0x7, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x3e0}}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x1006}, [@IFLA_MASTER={0x8}, @IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x12c, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfdd59a69ff858efc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12c}}, 0x20008000) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="02c90000000005000000000600000000000000ffff8b93161229d00af3ff404d24f70b77bbf32fcae05045b298973f4fbde3dd767b640ec0c6b94cf3977cc8c798cda0b3e3e201941bd58561b38b2317cd4961eeb6c4f4f3afcfc05f43a0330c13330929ac09996a44"], 0x15) [ 339.726034][ T23] usb 4-1: USB disconnect, device number 65 23:06:50 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:50 executing program 0: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x400045, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x400045, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) 23:06:50 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 339.776807][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 339.785017][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.798047][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 339.810682][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 23:06:50 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1f, 0xc8, 0x81}}}, 0x6) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x2}}}, 0x8) [ 339.832212][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 339.851518][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:50 executing program 0: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x400045, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:50 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x79}, @l2cap_cid_signaling={{0x75}, [@l2cap_info_rsp={{0xb, 0x2b, 0x9}, {0xc98, 0xa494, "a970afd275"}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x72}}, @l2cap_conn_req={{0x2, 0x54, 0x4}, {0x9, 0x81}}, @l2cap_info_rsp={{0xb, 0xf4, 0x50}, {0x400, 0xc3, "643ade0c8cd533db082e94eced58719a7606a2ba1f612815560f9d3b018ced63f8298f1495f84110f6de793d5d91c95460e81b5123da8d320ec5bd878d150e4370ba8db8e0de041f74f73135"}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x2}}]}}, 0x7e) [ 339.922225][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 340.016688][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 340.137249][ T23] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 340.540192][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.551139][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.560933][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 340.570006][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.579745][ T23] usb 4-1: config 0 descriptor?? 23:06:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x6666, 0x8802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x8ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x94, 0xfa, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x5, 0xff}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x4995ee99d5c28dc, 0x9, 0x5, 0x2, 0x10, 0x6}, 0xf, &(0x7f0000000480)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1f, 0x6b, 0x5}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x27, {0x27, 0x8, "8ee2367fffc84c483c3cddc31a206243c899bb989af1f2a2b4fbcdeb6866622f677a0fa223"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000100)={0x0, 0x22, 0x12, {[@local=@item_012={0x0, 0x2, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "3d481614"}, @main=@item_4={0x3, 0x0, 0xb, "fc996e95"}, @main=@item_4={0x3, 0x0, 0x9, "08f5460d"}, @global=@item_012={0x1, 0x1, 0x7, "a7"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe00, 0x1f, 0x1, {0x22, 0x33b}}}}, &(0x7f00000003c0)={0x18, &(0x7f0000000200)={0x40, 0x17, 0xb1, "06ec27f18bf91f709ce8cd213e26db60373aea7de5a14d528f6271091eb4570a3aabb49cdf832524d5ab47aa160e14f99bac01f7165b56989787a1dc82b060a9f40b3409e903cf0a147cf238e72b9a188bdc9ee79063dfd9608246d0004e9881e6678e285f1c82deee315efa73cb6ab6ea2c6863ba65bafd3218da1957efda5b84175aeacc7a408122610a1191e3f112cdee51dd969b48bdcbdb53d7cac9d423e7524b67f0c11d16e8a954c3ec66c3456f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x1, 0x39, "14d5ec3cbeab536a5c3a5081c2e4d633cda6b1aa54fcce8ea68948ea584af80121c110006c7284e7c96f6b456ae3ab227b557567c48d1ef985"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) 23:06:51 executing program 2: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$amidi(&(0x7f0000000080), 0xc67, 0x8000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$damon_init_regions(r1, &(0x7f0000000040)={{}, {' ', 0xa704}, {' ', 0x8}}, 0x3f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x300100}, 0xc, &(0x7f0000000840)={&(0x7f0000000440)={0x3e0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5a46, 0xfe, 0x6, 0x9}, {0x7c5a, 0x1, 0x7, 0x1}, {0x7, 0xde, 0x6, 0x1}, {0xfffc, 0x7, 0x1f, 0x77f5fa91}, {0x8000, 0x8, 0x7, 0x7}, {0x0, 0x40, 0x2, 0x80000001}, {0x1f, 0x7f, 0x7f, 0x2}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x0, 0x5, 0x7f5}, {0xfff, 0x0, 0x6d, 0x6}, {0x8001, 0x4d, 0x40, 0x9}, {0xfeff, 0x78, 0x1, 0x10000}, {0x81, 0x3, 0x7, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x3e0}}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x1006}, [@IFLA_MASTER={0x8}, @IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x12c, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfdd59a69ff858efc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12c}}, 0x20008000) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="02c90000000005000000000600000000000000ffff8b93161229d00af3ff404d24f70b77bbf32fcae05045b298973f4fbde3dd767b640ec0c6b94cf3977cc8c798cda0b3e3e201941bd58561b38b2317cd4961eeb6c4f4f3afcfc05f43a0330c13330929ac09996a44"], 0x15) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_open_dev$amidi(&(0x7f0000000080), 0xc67, 0x8000) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$damon_init_regions(r1, &(0x7f0000000040)={{}, {' ', 0xa704}, {' ', 0x8}}, 0x3f) (async) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r3, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x300100}, 0xc, &(0x7f0000000840)={&(0x7f0000000440)={0x3e0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5a46, 0xfe, 0x6, 0x9}, {0x7c5a, 0x1, 0x7, 0x1}, {0x7, 0xde, 0x6, 0x1}, {0xfffc, 0x7, 0x1f, 0x77f5fa91}, {0x8000, 0x8, 0x7, 0x7}, {0x0, 0x40, 0x2, 0x80000001}, {0x1f, 0x7f, 0x7f, 0x2}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x0, 0x5, 0x7f5}, {0xfff, 0x0, 0x6d, 0x6}, {0x8001, 0x4d, 0x40, 0x9}, {0xfeff, 0x78, 0x1, 0x10000}, {0x81, 0x3, 0x7, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x3e0}}, 0x40000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x1006}, [@IFLA_MASTER={0x8}, @IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x12c, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfdd59a69ff858efc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12c}}, 0x20008000) (async) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="02c90000000005000000000600000000000000ffff8b93161229d00af3ff404d24f70b77bbf32fcae05045b298973f4fbde3dd767b640ec0c6b94cf3977cc8c798cda0b3e3e201941bd58561b38b2317cd4961eeb6c4f4f3afcfc05f43a0330c13330929ac09996a44"], 0x15) (async) 23:06:51 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1f, 0xc8, 0x81}}}, 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1f, 0xc8, 0x81}}}, 0x6) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x2}}}, 0x8) (async) 23:06:51 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:51 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x79}, @l2cap_cid_signaling={{0x75}, [@l2cap_info_rsp={{0xb, 0x2b, 0x9}, {0xc98, 0xa494, "a970afd275"}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x72}}, @l2cap_conn_req={{0x2, 0x54, 0x4}, {0x9, 0x81}}, @l2cap_info_rsp={{0xb, 0xf4, 0x50}, {0x400, 0xc3, "643ade0c8cd533db082e94eced58719a7606a2ba1f612815560f9d3b018ced63f8298f1495f84110f6de793d5d91c95460e81b5123da8d320ec5bd878d150e4370ba8db8e0de041f74f73135"}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x2}}]}}, 0x7e) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x79}, @l2cap_cid_signaling={{0x75}, [@l2cap_info_rsp={{0xb, 0x2b, 0x9}, {0xc98, 0xa494, "a970afd275"}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x72}}, @l2cap_conn_req={{0x2, 0x54, 0x4}, {0x9, 0x81}}, @l2cap_info_rsp={{0xb, 0xf4, 0x50}, {0x400, 0xc3, "643ade0c8cd533db082e94eced58719a7606a2ba1f612815560f9d3b018ced63f8298f1495f84110f6de793d5d91c95460e81b5123da8d320ec5bd878d150e4370ba8db8e0de041f74f73135"}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x2}}]}}, 0x7e) (async) 23:06:51 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 340.838099][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.849116][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.883153][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 340.893312][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 340.902232][ T3653] Bluetooth: hci1: wrong event for mode 0 23:06:51 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x37) 23:06:51 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x79}, @l2cap_cid_signaling={{0x75}, [@l2cap_info_rsp={{0xb, 0x2b, 0x9}, {0xc98, 0xa494, "a970afd275"}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x72}}, @l2cap_conn_req={{0x2, 0x54, 0x4}, {0x9, 0x81}}, @l2cap_info_rsp={{0xb, 0xf4, 0x50}, {0x400, 0xc3, "643ade0c8cd533db082e94eced58719a7606a2ba1f612815560f9d3b018ced63f8298f1495f84110f6de793d5d91c95460e81b5123da8d320ec5bd878d150e4370ba8db8e0de041f74f73135"}}, @l2cap_cmd_rej_unk={{0x1, 0x3f, 0x2}, {0x2}}]}}, 0x7e) 23:06:51 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) (async) [ 340.930223][ T3653] Bluetooth: Unexpected start frame (len 16) [ 340.958201][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 340.964226][ T23] usbhid: probe of 4-1:0.0 failed with error -71 23:06:51 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0x0, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) [ 340.977567][ T23] usb 4-1: USB disconnect, device number 66 23:06:51 executing program 2: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$amidi(&(0x7f0000000080), 0xc67, 0x8000) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$damon_init_regions(r1, &(0x7f0000000040)={{}, {' ', 0xa704}, {' ', 0x8}}, 0x3f) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x300100}, 0xc, &(0x7f0000000840)={&(0x7f0000000440)={0x3e0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5a46, 0xfe, 0x6, 0x9}, {0x7c5a, 0x1, 0x7, 0x1}, {0x7, 0xde, 0x6, 0x1}, {0xfffc, 0x7, 0x1f, 0x77f5fa91}, {0x8000, 0x8, 0x7, 0x7}, {0x0, 0x40, 0x2, 0x80000001}, {0x1f, 0x7f, 0x7f, 0x2}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x0, 0x5, 0x7f5}, {0xfff, 0x0, 0x6d, 0x6}, {0x8001, 0x4d, 0x40, 0x9}, {0xfeff, 0x78, 0x1, 0x10000}, {0x81, 0x3, 0x7, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x3e0}}, 0x40000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x1006}, [@IFLA_MASTER={0x8}, @IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x12c, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfdd59a69ff858efc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12c}}, 0x20008000) (async) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="02c90000000005000000000600000000000000ffff8b93161229d00af3ff404d24f70b77bbf32fcae05045b298973f4fbde3dd767b640ec0c6b94cf3977cc8c798cda0b3e3e201941bd58561b38b2317cd4961eeb6c4f4f3afcfc05f43a0330c13330929ac09996a44"], 0x15) 23:06:51 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "348edc96a22cd1fc4f2332655b10124f89197547cea0ca8bd9a497bc59599db6741294821c77de582586193d60db908b222a8896a6382d90334560f09f16a2bb875c70e1f18aad20abce8ddb2fdd8497a4bd19ab1f01c3d7a3f7ad470204614fdd8949ef20cfb19fc6205d40955afc8ab1b0b450f0b8d27eb9bc6cb7c3153199a98f9721fe31f4727ce715a70d437a66ba215a4f943abd0cf863e4e27a2b535e6a8ce715129960d101533acfe20bcd01844f58ea526e37a8ff00f0a178c52ed3c39963e0"}, 0xc8) [ 341.058336][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 341.059229][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 341.072887][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 341.397271][ T23] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 341.767491][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.778611][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.790276][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 341.806676][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.816200][ T23] usb 4-1: config 0 descriptor?? [ 342.120757][ T23] ortek 0003:05A4:2000.000F: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 342.318319][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.326938][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:06:54 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) (async) 23:06:54 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x37) 23:06:54 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "348edc96a22cd1fc4f2332655b10124f89197547cea0ca8bd9a497bc59599db6741294821c77de582586193d60db908b222a8896a6382d90334560f09f16a2bb875c70e1f18aad20abce8ddb2fdd8497a4bd19ab1f01c3d7a3f7ad470204614fdd8949ef20cfb19fc6205d40955afc8ab1b0b450f0b8d27eb9bc6cb7c3153199a98f9721fe31f4727ce715a70d437a66ba215a4f943abd0cf863e4e27a2b535e6a8ce715129960d101533acfe20bcd01844f58ea526e37a8ff00f0a178c52ed3c39963e0"}, 0xc8) (rerun: 64) 23:06:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0x0, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) 23:06:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000bc0)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0x91, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x5c, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x80, 0x5}, {0x6, 0x24, 0x1a, 0xc, 0x2d}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x9c, 0xc4, 0x9a}, @mdlm={0x15, 0x24, 0x12, 0x5}, @dmm={0x7, 0x24, 0x14, 0x81, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x48, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x20, 0x7, 0x20, 0x1}, 0x27, &(0x7f0000000080)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xfc, "19110e322aedab180eaa596d24ed0184"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x0, 0x6, 0x100, 0x3}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io(r2, &(0x7f0000000680)={0x18, &(0x7f0000000400)={0x20, 0xc, 0xab, {0xab, 0x12, "c5e949560a24e905e7391adb933e0badd0ab6750ccf5d0b1015c5f30c9488bda04772d72e6d66235080b7ea113cc6fb78cceb58d161fa9b978d520d78f08d4360a3d6f6679eac9ca2bba98d991db27f2620f10b787d71420bbeef15f3a6688f584c4c3125cc3e33ab082eefa28eb6e90fa22406df9a6cfc5a6173454071d9d96717d0bdf611321e06db6be6962e1df1b508547cefa29c41c442b9613a98354ca829af72cb6d017ecc3"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000500)={0x0, 0xf, 0xc1, {0x5, 0xf, 0xc1, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x1, 0x6b, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x6, 0x400}, @generic={0xa0, 0x10, 0xa, "d2410f1698b584f0e428dc9ba13b95c2199db278267208f3e7f50edf5a5ee2bc04c3d37574f027a660661da792043490928fafe9947ebb28529c60f18e4c3a8db79f5731a9f63109ef3c3b370d3722a3b99fedf6e295a7f1610f8e65d5288b989db5bc9cd10d3059d93642815e872a40a899d17f1c8ef8f2a7ecebc1385b1faf28270e180595ac588e4a01532ceab38f50872a8dde8db92a4d926b98d6"}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xdc, 0x0, 0x8, 0xdd, "a8fe1530", "ded8485b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x6, 0xaf, 0x1, 0x3, 0x5}}}, &(0x7f0000000b00)={0x44, &(0x7f00000006c0)={0x40, 0x1, 0x62, "f5a616fa8f663c62c6f73b8a7f5278afee9fcd13579cb2b5977bc8761fbc04608fda7f15c0777f9b8266765c6204726e24c0168548b4114d5016149f5d838469e2d8e3332c9b1151c58476215c7d45ca126edf7a60fa60253cf5713d7f4ddef8a4b3"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x0, 0x80}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x9b97}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xa6}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "419d"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "45c3"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="201692000000f2f22fad"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000dc0)={0x14, &(0x7f0000000c00)={0x20, 0x31, 0xd4, {0xd4, 0x22, "d5f5339ea26bda32f7e2c3f98967c627967a1c65527d295d2b1eb9fd67972d5340d43b6970d6ee620d4a44434e86a84f79fbf147fdeb67156a4a9020c5e92ad1783897923479dc0fdda0d82555439b822ef70fe98583165cc87a83f63f78ff7b4c325165d2e6d5b1dd0bac524f56392d1848840e8cff54e7d7118c5d3e2f9182f37f629986952b217ad47129e69177cd506c2d69dafbf98d634cfe6925fb9c8290cd84c3671f15e10c49a73a732799701d30b4e365bbe696d63c34973efd38a1fff758ec3ae664020c881a1b8768a4e7e8ad"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, &(0x7f0000000d40)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x3, "526a8b28"}, @local=@item_4={0x3, 0x2, 0x5, "c27115d8"}, @local=@item_4={0x3, 0x2, 0x3, "24952a2d"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4ee8, 0x3f, 0x1, {0x22, 0x54b}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e00)={0x20, 0x15, 0xcf, "f5500e91ef36fce41310cc936aa819d12eb2b43219e347fb116093d53503babce63e5a6d04366d8fe935280b4f4175321f54401e33c405e94e87897fa12d6fe4e711054bcaa33b0753fb4933646697adac15c32fd3d4eac8f6fe27bb0eab983e0a26c60c4815fe965949ae749799d37f7f9477e774e134badc1a825c5b088b1ff6b7fca2b1dc7b0e060595dc6af76c64d624b112a770d828b2ea897ff02884f1085ceec5dde64c020884baf662f0a4632ed66af66c0bfdf420dce71dac8fcf7a77848b4c4d3f4c03e4e712af8df33f"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000f80)={0x20, 0x1, 0xa9, "0d2b1eae4191818c8d7c560926f0592b6ff9cb9755fb41434205a553c90f9be60635649d5c5e2958ab8e37eec3a53d1488dc9173bd99821716a7927b6a299ceeeddb4aec6f6af09ac295ac9c05da8491db71f9107010a086ccf92194b7079cc89970a670b0ed62156c4087e6395ac324bc4c6fbba0919d159e408d81eb0fe726a7060b2cbe3b0032418e4780f7d569b742be5840c2f20e73f922d4cadb3455ae77a4616cf7f8918256"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x7}}) 23:06:54 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x34}, @l2cap_cid_signaling={{0x30}, [@l2cap_conf_req={{0x4, 0x0, 0x2c}, {0x3, 0xbc, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x0, 0x9, 0x80000001, 0x3, 0x8}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xffff}]}}]}}, 0x39) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 344.026535][ T23] usb 4-1: USB disconnect, device number 67 [ 344.057072][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:54 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x37) 23:06:54 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03da3daaaaaa00000700c8f9dc000000000000000000000000bef172000000aaaaaaaae8000000000f110f000001"], 0x7e) 23:06:54 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x34}, @l2cap_cid_signaling={{0x30}, [@l2cap_conf_req={{0x4, 0x0, 0x2c}, {0x3, 0xbc, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x0, 0x9, 0x80000001, 0x3, 0x8}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xffff}]}}]}}, 0x39) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x34}, @l2cap_cid_signaling={{0x30}, [@l2cap_conf_req={{0x4, 0x0, 0x2c}, {0x3, 0xbc, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x0, 0x9, 0x80000001, 0x3, 0x8}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xffff}]}}]}}, 0x39) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 23:06:54 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0]}) 23:06:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0x0, 0x7f, 0x3, "54ea39daaaad75e3"}}}, 0x10) [ 344.072030][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 344.078286][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 344.113854][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:54 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc4}, "348edc96a22cd1fc4f2332655b10124f89197547cea0ca8bd9a497bc59599db6741294821c77de582586193d60db908b222a8896a6382d90334560f09f16a2bb875c70e1f18aad20abce8ddb2fdd8497a4bd19ab1f01c3d7a3f7ad470204614fdd8949ef20cfb19fc6205d40955afc8ab1b0b450f0b8d27eb9bc6cb7c3153199a98f9721fe31f4727ce715a70d437a66ba215a4f943abd0cf863e4e27a2b535e6a8ce715129960d101533acfe20bcd01844f58ea526e37a8ff00f0a178c52ed3c39963e0"}, 0xc8) 23:06:54 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03da3daaaaaa00000700c8f9dc000000000000000000000000bef172000000aaaaaaaae8000000000f110f000001"], 0x7e) 23:06:54 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x34}, @l2cap_cid_signaling={{0x30}, [@l2cap_conf_req={{0x4, 0x0, 0x2c}, {0x3, 0xbc, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x0, 0x9, 0x80000001, 0x3, 0x8}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xffff}]}}]}}, 0x39) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 344.220890][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:54 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0]}) 23:06:54 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x0, 0x3, "54ea39daaaad75e3"}}}, 0x10) [ 344.372377][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 344.557328][ T23] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 344.917505][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.928480][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.939132][ T23] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 344.948559][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.958119][ T23] usb 4-1: config 0 descriptor?? [ 345.440403][ T23] ortek 0003:05A4:2000.0010: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 345.641343][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.653921][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.665485][ T4977] usb 4-1: USB disconnect, device number 68 23:06:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000bc0)) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x5, 0x91, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x5c, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x80, 0x5}, {0x6, 0x24, 0x1a, 0xc, 0x2d}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x9c, 0xc4, 0x9a}, @mdlm={0x15, 0x24, 0x12, 0x5}, @dmm={0x7, 0x24, 0x14, 0x81, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x48, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x20, 0x7, 0x20, 0x1}, 0x27, &(0x7f0000000080)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xfc, "19110e322aedab180eaa596d24ed0184"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x0, 0x6, 0x100, 0x3}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io(r2, &(0x7f0000000680)={0x18, &(0x7f0000000400)={0x20, 0xc, 0xab, {0xab, 0x12, "c5e949560a24e905e7391adb933e0badd0ab6750ccf5d0b1015c5f30c9488bda04772d72e6d66235080b7ea113cc6fb78cceb58d161fa9b978d520d78f08d4360a3d6f6679eac9ca2bba98d991db27f2620f10b787d71420bbeef15f3a6688f584c4c3125cc3e33ab082eefa28eb6e90fa22406df9a6cfc5a6173454071d9d96717d0bdf611321e06db6be6962e1df1b508547cefa29c41c442b9613a98354ca829af72cb6d017ecc3"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000500)={0x0, 0xf, 0xc1, {0x5, 0xf, 0xc1, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x1, 0x6b, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x6, 0x400}, @generic={0xa0, 0x10, 0xa, "d2410f1698b584f0e428dc9ba13b95c2199db278267208f3e7f50edf5a5ee2bc04c3d37574f027a660661da792043490928fafe9947ebb28529c60f18e4c3a8db79f5731a9f63109ef3c3b370d3722a3b99fedf6e295a7f1610f8e65d5288b989db5bc9cd10d3059d93642815e872a40a899d17f1c8ef8f2a7ecebc1385b1faf28270e180595ac588e4a01532ceab38f50872a8dde8db92a4d926b98d6"}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xdc, 0x0, 0x8, 0xdd, "a8fe1530", "ded8485b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x6, 0xaf, 0x1, 0x3, 0x5}}}, &(0x7f0000000b00)={0x44, &(0x7f00000006c0)={0x40, 0x1, 0x62, "f5a616fa8f663c62c6f73b8a7f5278afee9fcd13579cb2b5977bc8761fbc04608fda7f15c0777f9b8266765c6204726e24c0168548b4114d5016149f5d838469e2d8e3332c9b1151c58476215c7d45ca126edf7a60fa60253cf5713d7f4ddef8a4b3"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x0, 0x80}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x9b97}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xa6}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "419d"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "45c3"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="201692000000f2f22fad"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000dc0)={0x14, &(0x7f0000000c00)={0x20, 0x31, 0xd4, {0xd4, 0x22, "d5f5339ea26bda32f7e2c3f98967c627967a1c65527d295d2b1eb9fd67972d5340d43b6970d6ee620d4a44434e86a84f79fbf147fdeb67156a4a9020c5e92ad1783897923479dc0fdda0d82555439b822ef70fe98583165cc87a83f63f78ff7b4c325165d2e6d5b1dd0bac524f56392d1848840e8cff54e7d7118c5d3e2f9182f37f629986952b217ad47129e69177cd506c2d69dafbf98d634cfe6925fb9c8290cd84c3671f15e10c49a73a732799701d30b4e365bbe696d63c34973efd38a1fff758ec3ae664020c881a1b8768a4e7e8ad"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, &(0x7f0000000d40)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x3, "526a8b28"}, @local=@item_4={0x3, 0x2, 0x5, "c27115d8"}, @local=@item_4={0x3, 0x2, 0x3, "24952a2d"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4ee8, 0x3f, 0x1, {0x22, 0x54b}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e00)={0x20, 0x15, 0xcf, "f5500e91ef36fce41310cc936aa819d12eb2b43219e347fb116093d53503babce63e5a6d04366d8fe935280b4f4175321f54401e33c405e94e87897fa12d6fe4e711054bcaa33b0753fb4933646697adac15c32fd3d4eac8f6fe27bb0eab983e0a26c60c4815fe965949ae749799d37f7f9477e774e134badc1a825c5b088b1ff6b7fca2b1dc7b0e060595dc6af76c64d624b112a770d828b2ea897ff02884f1085ceec5dde64c020884baf662f0a4632ed66af66c0bfdf420dce71dac8fcf7a77848b4c4d3f4c03e4e712af8df33f"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000f80)={0x20, 0x1, 0xa9, "0d2b1eae4191818c8d7c560926f0592b6ff9cb9755fb41434205a553c90f9be60635649d5c5e2958ab8e37eec3a53d1488dc9173bd99821716a7927b6a299ceeeddb4aec6f6af09ac295ac9c05da8491db71f9107010a086ccf92194b7079cc89970a670b0ed62156c4087e6395ac324bc4c6fbba0919d159e408d81eb0fe726a7060b2cbe3b0032418e4780f7d569b742be5840c2f20e73f922d4cadb3455ae77a4616cf7f8918256"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x7}}) 23:06:56 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0]}) 23:06:56 executing program 5: ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c047fc800e40ec312d20a00fa"], 0xf) 23:06:56 executing program 2: r0 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xb8}, &(0x7f00000000c0)=0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:56 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x40, 0xc8, 0x0, 0x0, "54ea39daaaad75e3"}}}, 0x10) 23:06:56 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03da3daaaaaa00000700c8f9dc000000000000000000000000bef172000000aaaaaaaae8000000000f110f000001"], 0x7e) 23:06:56 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x5f5}, {0x6, [{@any, 0x40, 0x0, "790b18", 0xfffb, 0x1, "22454fc660ecd2b74e6898c0a87d50a0d2e605b3e57cc866d75130aff0f5c7ad38524f62acf4006a8afb70b596b0d2e162712b8b0ac94c57f12f2a970db3889305e6c29e627d80947cffee601ab3e0850bbc944b9ce443eb16a7f533b23621917e392d9238311b5aff4bad7dab9b0b21dba475cefac88eeb841a34cf6d259cfd3419a4bb079419ab74fcdd77d9d73fd40b41c0a98c9b28e999537abcd90b89169814237fc6ec29d4abc91f8f1a35828c3950576e823665f070bc274ecd230697d13a9f903ed4c51d66aa6a51b9c9b40f14fbc71a7971457387546d661ae580b0585bb2347a432fbf04c21ee849ee1d52"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x0, "88eee3", 0x800, 0x81, "e337bbfff8e9028cd52f1b26819cd4093ac48923c410bdede2df3f216cd375ab2202c555b15c050421c82cf2c43c23152caf4c3ccdca8ee80c928fd0f7be42e3b63dace5e5eab803e931a601f93194bf9973ddcbfab69a6900750a03f1fbc8f836c7ef921a552ca3d1beb3939d3f80fe1e75f9c6ffdc3c67dcbbb62720e400031db580f53a361162fa29e924f4118010cb999628bd18871d61569de814621a459e6f5026b407a2ad23a54094a019ecd5aaf605d9a18f8d1fe18acb86caf7bd66c238a75876d4b23610bd56bc09a8602c3d1c34906d133b85a44d6c6c9fedc1614daa40d880ea641ec41a5deb46fdb358"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb, 0x9, "09b078", 0x0, 0x80, "9f5ab2ed15722db9207324683995fdde4139dc9c87079257ff1a8d21557de807a6879ad3453dd914550a72bdee087f9f35cd6db5d520be1e2eb56d8c147ea593355389038d07ac161188004a2efba9a69031adae5c5354a7bcf9a151ea03cfecdd75b22024be284a494a766629f196eaefef70c19deabf477e83b2317fe39b51c4438034a5b93fad6553b7af3d1df0cabe3ff3d4d616a79b4b60f96f9cd432b33eb84481e50a6e13b563957a200d70fcb3bbdfbee52b85ff527f6eada336eeae8a76e5c8977db235fb5426b6870a2aed460ebbe5818f1fb4ad8a225609f70f059aa05153ad43b580eabd6fc1e5fc968f"}, {@none, 0x2, 0x4, "b35b6a", 0x9, 0x1, "74ee621f0b0b49c7a7a7fd4f32292b577e47cd5e8b06748d1fb0e0ce16e2ec956017358e5ef18aafc6c8f8930b7ffb1bd4c8c598eee1ef0c69af0266716d84fe813268656faf8529dbb550d612240f3fb897897071ce1b2fc800c9bfbef6034708d40da5a2a5e561e13e76f896b234f3807ff6817f41b85b2ca2fdbb2f9717699b9e3af5ea812dd74eff47d83082a9f4b85acb3349f7c6d2de9fd212508c89f100d584fc6bd71f258a6c322a5d5c79fd49d8d96e7207dfca2b881d07ff64e7da4851a9b45f0abda8fdc30194eb4f749f92474e9daba4fae4aa64521ddb480a109abc2840e1e5f4c7308a2ae0c2496374"}, {@any, 0x54, 0xaf, "057e2f", 0xc7, 0x40, "8809f4a78f0aa916bc9d0be7bc774c7241772e31f7eb2aae71c3e46f0878534bf5455cfcb55488ac944d02262420926e1846d0a161ea7b577a218c1b528422b2e3fb29753e4bb90d1df9d0660cf8d6ad87c81a57e11374eb4eaf5ca779e8e3be753648e9b684bbb493b54d63375562777a5b576b474416bdfcd1f1c3f97789daed5f8848235f7d539b488b78e2a54a1b7a9a9873643b8f59dede4b361d9095476fd3b7a891864e10e739c7492f0ff19e11a90ccf387f48832b0c9529e805c3fd566216b843286c656a5087427282baa17ff5c54c8c771c3cc3d9756dc1c7ef63dae5eec05be357d3713e704f481c175b"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x89, 0x2, "dd30be", 0x6000, 0x7, "9902b91b563d5c3b6abb02f22b359ef2dde8c03d702e4a7abc32464b0e880e678107e416d77b4b9bab185d66956865c9b1d1ef46dc4098269b4bca59e14a5b9e69a33854ea585c6c8186f65e6797303acea8d402843eba990398a9866eca5468b2a08f7d594e3c452662cb267cc1c9d9cc4298ef653661737ea164903e359a6c339e36eb25b9fd47fdd5131b445a566a6782982deb84eedc03f17785e5cc4d5bc57ace90debb478be86b1e410f653c6750e9e42166027fab16dc11fc9e3b473bed1d25bf3584d13939549840510816d916691d1247d6e045e1ec7ad00d0f4b1dd5e0a0ac4bace35627e643e3c8d0d795"}]}}}, 0x5f8) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xff, 0x2}, {0x5}}}}, 0xf) 23:06:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="045403000000eb8d92197458a17ac2cc886183fcd420e644ee96e89cfc3e4c6654f12bfabeed41", @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r2, @ANYRESDEC=r2], 0x6) 23:06:56 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f000000b07fb03eaf53cc7770ad4e785324611e012fd3822d7db46563c40e14"], 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0xb8d, 0x7}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x9, 0xcaa7, 0x8}}, @l2cap_create_chan_req={{0xc, 0x7, 0x5}, {0x80, 0x3f, 0x1d}}, @l2cap_conn_rsp={{0x3, 0x81, 0x8}, {0x7fff, 0x200, 0xee7e, 0x401}}, @l2cap_info_rsp={{0xb, 0x43, 0xb}, {0x8, 0x4544, "459e8775bce449"}}, @l2cap_disconn_rsp={{0x7, 0xc8, 0x4}, {0x9, 0x1}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x1, 0x7c}}]}}, 0x45) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x93}, "948c7c07e7b62dcd929401258b5ccab26da6750b875d68825b92cd92fc15b6e048162fdad406790af8635496d121661d6abb86397e4cd49eb10e420eb862b210effa1f066acbc4f8fb4850568cf6b4b1c4b272cee12ba22627b5f50f2afdc49a1c63b98b3abc94da8b9eca0ef5a24ae6b414d8c726a0a6a06abfb153cf880a080a445889beafa576374fcd48997cf94e4a3b0b"}, 0x97) [ 346.217622][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:56 executing program 5: ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c047fc800e40ec312d20a00fa"], 0xf) 23:06:56 executing program 2: r0 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xb8}, &(0x7f00000000c0)=0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:56 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f000000b07fb03eaf53cc7770ad4e785324611e012fd3822d7db46563c40e14"], 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0xb8d, 0x7}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x9, 0xcaa7, 0x8}}, @l2cap_create_chan_req={{0xc, 0x7, 0x5}, {0x80, 0x3f, 0x1d}}, @l2cap_conn_rsp={{0x3, 0x81, 0x8}, {0x7fff, 0x200, 0xee7e, 0x401}}, @l2cap_info_rsp={{0xb, 0x43, 0xb}, {0x8, 0x4544, "459e8775bce449"}}, @l2cap_disconn_rsp={{0x7, 0xc8, 0x4}, {0x9, 0x1}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x1, 0x7c}}]}}, 0x45) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x93}, "948c7c07e7b62dcd929401258b5ccab26da6750b875d68825b92cd92fc15b6e048162fdad406790af8635496d121661d6abb86397e4cd49eb10e420eb862b210effa1f066acbc4f8fb4850568cf6b4b1c4b272cee12ba22627b5f50f2afdc49a1c63b98b3abc94da8b9eca0ef5a24ae6b414d8c726a0a6a06abfb153cf880a080a445889beafa576374fcd48997cf94e4a3b0b"}, 0x97) [ 346.300635][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 346.311229][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 346.406357][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 346.607269][ T15] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 346.987502][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.998535][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.008343][ T15] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 347.017511][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.027525][ T15] usb 4-1: config 0 descriptor?? [ 347.269843][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.279115][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.288353][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.296893][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.308142][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:06:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000bc0)) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x5, 0x91, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x5c, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x80, 0x5}, {0x6, 0x24, 0x1a, 0xc, 0x2d}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x9c, 0xc4, 0x9a}, @mdlm={0x15, 0x24, 0x12, 0x5}, @dmm={0x7, 0x24, 0x14, 0x81, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x48, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x20, 0x7, 0x20, 0x1}, 0x27, &(0x7f0000000080)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xfc, "19110e322aedab180eaa596d24ed0184"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x0, 0x6, 0x100, 0x3}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io(r2, &(0x7f0000000680)={0x18, &(0x7f0000000400)={0x20, 0xc, 0xab, {0xab, 0x12, "c5e949560a24e905e7391adb933e0badd0ab6750ccf5d0b1015c5f30c9488bda04772d72e6d66235080b7ea113cc6fb78cceb58d161fa9b978d520d78f08d4360a3d6f6679eac9ca2bba98d991db27f2620f10b787d71420bbeef15f3a6688f584c4c3125cc3e33ab082eefa28eb6e90fa22406df9a6cfc5a6173454071d9d96717d0bdf611321e06db6be6962e1df1b508547cefa29c41c442b9613a98354ca829af72cb6d017ecc3"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000500)={0x0, 0xf, 0xc1, {0x5, 0xf, 0xc1, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x1, 0x6b, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x6, 0x400}, @generic={0xa0, 0x10, 0xa, "d2410f1698b584f0e428dc9ba13b95c2199db278267208f3e7f50edf5a5ee2bc04c3d37574f027a660661da792043490928fafe9947ebb28529c60f18e4c3a8db79f5731a9f63109ef3c3b370d3722a3b99fedf6e295a7f1610f8e65d5288b989db5bc9cd10d3059d93642815e872a40a899d17f1c8ef8f2a7ecebc1385b1faf28270e180595ac588e4a01532ceab38f50872a8dde8db92a4d926b98d6"}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0xdc, 0x0, 0x8, 0xdd, "a8fe1530", "ded8485b"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x6, 0xaf, 0x1, 0x3, 0x5}}}, &(0x7f0000000b00)={0x44, &(0x7f00000006c0)={0x40, 0x1, 0x62, "f5a616fa8f663c62c6f73b8a7f5278afee9fcd13579cb2b5977bc8761fbc04608fda7f15c0777f9b8266765c6204726e24c0168548b4114d5016149f5d838469e2d8e3332c9b1151c58476215c7d45ca126edf7a60fa60253cf5713d7f4ddef8a4b3"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x0, 0x80}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x9b97}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xa6}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "419d"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "45c3"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7f}}) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="201692000000f2f22fad"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000dc0)={0x14, &(0x7f0000000c00)={0x20, 0x31, 0xd4, {0xd4, 0x22, "d5f5339ea26bda32f7e2c3f98967c627967a1c65527d295d2b1eb9fd67972d5340d43b6970d6ee620d4a44434e86a84f79fbf147fdeb67156a4a9020c5e92ad1783897923479dc0fdda0d82555439b822ef70fe98583165cc87a83f63f78ff7b4c325165d2e6d5b1dd0bac524f56392d1848840e8cff54e7d7118c5d3e2f9182f37f629986952b217ad47129e69177cd506c2d69dafbf98d634cfe6925fb9c8290cd84c3671f15e10c49a73a732799701d30b4e365bbe696d63c34973efd38a1fff758ec3ae664020c881a1b8768a4e7e8ad"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, &(0x7f0000000d40)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x3, "526a8b28"}, @local=@item_4={0x3, 0x2, 0x5, "c27115d8"}, @local=@item_4={0x3, 0x2, 0x3, "24952a2d"}, @local=@item_012={0x0, 0x2, 0x5}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4ee8, 0x3f, 0x1, {0x22, 0x54b}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e00)={0x20, 0x15, 0xcf, "f5500e91ef36fce41310cc936aa819d12eb2b43219e347fb116093d53503babce63e5a6d04366d8fe935280b4f4175321f54401e33c405e94e87897fa12d6fe4e711054bcaa33b0753fb4933646697adac15c32fd3d4eac8f6fe27bb0eab983e0a26c60c4815fe965949ae749799d37f7f9477e774e134badc1a825c5b088b1ff6b7fca2b1dc7b0e060595dc6af76c64d624b112a770d828b2ea897ff02884f1085ceec5dde64c020884baf662f0a4632ed66af66c0bfdf420dce71dac8fcf7a77848b4c4d3f4c03e4e712af8df33f"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000f80)={0x20, 0x1, 0xa9, "0d2b1eae4191818c8d7c560926f0592b6ff9cb9755fb41434205a553c90f9be60635649d5c5e2958ab8e37eec3a53d1488dc9173bd99821716a7927b6a299ceeeddb4aec6f6af09ac295ac9c05da8491db71f9107010a086ccf92194b7079cc89970a670b0ed62156c4087e6395ac324bc4c6fbba0919d159e408d81eb0fe726a7060b2cbe3b0032418e4780f7d569b742be5840c2f20e73f922d4cadb3455ae77a4616cf7f8918256"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x7}}) 23:06:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x5f5}, {0x6, [{@any, 0x40, 0x0, "790b18", 0xfffb, 0x1, "22454fc660ecd2b74e6898c0a87d50a0d2e605b3e57cc866d75130aff0f5c7ad38524f62acf4006a8afb70b596b0d2e162712b8b0ac94c57f12f2a970db3889305e6c29e627d80947cffee601ab3e0850bbc944b9ce443eb16a7f533b23621917e392d9238311b5aff4bad7dab9b0b21dba475cefac88eeb841a34cf6d259cfd3419a4bb079419ab74fcdd77d9d73fd40b41c0a98c9b28e999537abcd90b89169814237fc6ec29d4abc91f8f1a35828c3950576e823665f070bc274ecd230697d13a9f903ed4c51d66aa6a51b9c9b40f14fbc71a7971457387546d661ae580b0585bb2347a432fbf04c21ee849ee1d52"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x0, "88eee3", 0x800, 0x81, "e337bbfff8e9028cd52f1b26819cd4093ac48923c410bdede2df3f216cd375ab2202c555b15c050421c82cf2c43c23152caf4c3ccdca8ee80c928fd0f7be42e3b63dace5e5eab803e931a601f93194bf9973ddcbfab69a6900750a03f1fbc8f836c7ef921a552ca3d1beb3939d3f80fe1e75f9c6ffdc3c67dcbbb62720e400031db580f53a361162fa29e924f4118010cb999628bd18871d61569de814621a459e6f5026b407a2ad23a54094a019ecd5aaf605d9a18f8d1fe18acb86caf7bd66c238a75876d4b23610bd56bc09a8602c3d1c34906d133b85a44d6c6c9fedc1614daa40d880ea641ec41a5deb46fdb358"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb, 0x9, "09b078", 0x0, 0x80, "9f5ab2ed15722db9207324683995fdde4139dc9c87079257ff1a8d21557de807a6879ad3453dd914550a72bdee087f9f35cd6db5d520be1e2eb56d8c147ea593355389038d07ac161188004a2efba9a69031adae5c5354a7bcf9a151ea03cfecdd75b22024be284a494a766629f196eaefef70c19deabf477e83b2317fe39b51c4438034a5b93fad6553b7af3d1df0cabe3ff3d4d616a79b4b60f96f9cd432b33eb84481e50a6e13b563957a200d70fcb3bbdfbee52b85ff527f6eada336eeae8a76e5c8977db235fb5426b6870a2aed460ebbe5818f1fb4ad8a225609f70f059aa05153ad43b580eabd6fc1e5fc968f"}, {@none, 0x2, 0x4, "b35b6a", 0x9, 0x1, "74ee621f0b0b49c7a7a7fd4f32292b577e47cd5e8b06748d1fb0e0ce16e2ec956017358e5ef18aafc6c8f8930b7ffb1bd4c8c598eee1ef0c69af0266716d84fe813268656faf8529dbb550d612240f3fb897897071ce1b2fc800c9bfbef6034708d40da5a2a5e561e13e76f896b234f3807ff6817f41b85b2ca2fdbb2f9717699b9e3af5ea812dd74eff47d83082a9f4b85acb3349f7c6d2de9fd212508c89f100d584fc6bd71f258a6c322a5d5c79fd49d8d96e7207dfca2b881d07ff64e7da4851a9b45f0abda8fdc30194eb4f749f92474e9daba4fae4aa64521ddb480a109abc2840e1e5f4c7308a2ae0c2496374"}, {@any, 0x54, 0xaf, "057e2f", 0xc7, 0x40, "8809f4a78f0aa916bc9d0be7bc774c7241772e31f7eb2aae71c3e46f0878534bf5455cfcb55488ac944d02262420926e1846d0a161ea7b577a218c1b528422b2e3fb29753e4bb90d1df9d0660cf8d6ad87c81a57e11374eb4eaf5ca779e8e3be753648e9b684bbb493b54d63375562777a5b576b474416bdfcd1f1c3f97789daed5f8848235f7d539b488b78e2a54a1b7a9a9873643b8f59dede4b361d9095476fd3b7a891864e10e739c7492f0ff19e11a90ccf387f48832b0c9529e805c3fd566216b843286c656a5087427282baa17ff5c54c8c771c3cc3d9756dc1c7ef63dae5eec05be357d3713e704f481c175b"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x89, 0x2, "dd30be", 0x6000, 0x7, "9902b91b563d5c3b6abb02f22b359ef2dde8c03d702e4a7abc32464b0e880e678107e416d77b4b9bab185d66956865c9b1d1ef46dc4098269b4bca59e14a5b9e69a33854ea585c6c8186f65e6797303acea8d402843eba990398a9866eca5468b2a08f7d594e3c452662cb267cc1c9d9cc4298ef653661737ea164903e359a6c339e36eb25b9fd47fdd5131b445a566a6782982deb84eedc03f17785e5cc4d5bc57ace90debb478be86b1e410f653c6750e9e42166027fab16dc11fc9e3b473bed1d25bf3584d13939549840510816d916691d1247d6e045e1ec7ad00d0f4b1dd5e0a0ac4bace35627e643e3c8d0d795"}]}}}, 0x5f8) (async) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xff, 0x2}, {0x5}}}}, 0xf) 23:06:57 executing program 5: ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c047fc800e40ec312d20a00fa"], 0xf) 23:06:57 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f000000b07fb03eaf53cc7770ad4e785324611e012fd3822d7db46563c40e14"], 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0xb8d, 0x7}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x9, 0xcaa7, 0x8}}, @l2cap_create_chan_req={{0xc, 0x7, 0x5}, {0x80, 0x3f, 0x1d}}, @l2cap_conn_rsp={{0x3, 0x81, 0x8}, {0x7fff, 0x200, 0xee7e, 0x401}}, @l2cap_info_rsp={{0xb, 0x43, 0xb}, {0x8, 0x4544, "459e8775bce449"}}, @l2cap_disconn_rsp={{0x7, 0xc8, 0x4}, {0x9, 0x1}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x1, 0x7c}}]}}, 0x45) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x93}, "948c7c07e7b62dcd929401258b5ccab26da6750b875d68825b92cd92fc15b6e048162fdad406790af8635496d121661d6abb86397e4cd49eb10e420eb862b210effa1f066acbc4f8fb4850568cf6b4b1c4b272cee12ba22627b5f50f2afdc49a1c63b98b3abc94da8b9eca0ef5a24ae6b414d8c726a0a6a06abfb153cf880a080a445889beafa576374fcd48997cf94e4a3b0b"}, 0x97) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f000000b07fb03eaf53cc7770ad4e785324611e012fd3822d7db46563c40e14"], 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0xb8d, 0x7}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x9, 0xcaa7, 0x8}}, @l2cap_create_chan_req={{0xc, 0x7, 0x5}, {0x80, 0x3f, 0x1d}}, @l2cap_conn_rsp={{0x3, 0x81, 0x8}, {0x7fff, 0x200, 0xee7e, 0x401}}, @l2cap_info_rsp={{0xb, 0x43, 0xb}, {0x8, 0x4544, "459e8775bce449"}}, @l2cap_disconn_rsp={{0x7, 0xc8, 0x4}, {0x9, 0x1}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x1, 0x7c}}]}}, 0x45) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x93}, "948c7c07e7b62dcd929401258b5ccab26da6750b875d68825b92cd92fc15b6e048162fdad406790af8635496d121661d6abb86397e4cd49eb10e420eb862b210effa1f066acbc4f8fb4850568cf6b4b1c4b272cee12ba22627b5f50f2afdc49a1c63b98b3abc94da8b9eca0ef5a24ae6b414d8c726a0a6a06abfb153cf880a080a445889beafa576374fcd48997cf94e4a3b0b"}, 0x97) (async) 23:06:57 executing program 2: r0 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xb8}, &(0x7f00000000c0)=0x8) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="045403000000eb8d92197458a17ac2cc886183fcd420e644ee96e89cfc3e4c6654f12bfabeed41", @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r2, @ANYRESDEC=r2], 0x6) [ 347.318039][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.328297][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.338280][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.348406][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.359174][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:06:57 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb3}, "8cab70352c41a1c2d257491275d42fa1a9a5581fd1ebea516d5f5d65fca74c37c70d0184087446e7f9508167ccef67ad01164851edcccb691f997df4d118d1752cbcfc356dda0b2daeadb386734fccb632c5e8ef8a1403ce02311a85b2b2adb4f966b91b512c44f1d87c4be640ef0ade1675ff4ea2de76114092f1a7f3dc1235fd6df435525a3fcff5310742aa5797a9cb6d3d0abb22e8bb25ab6be2d753c471b6110aa93cdcfc74901223f17efcfda17149b0"}, 0xb7) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000001180)=@HCI_VENDOR_PKT, 0x2) 23:06:57 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x5f5}, {0x6, [{@any, 0x40, 0x0, "790b18", 0xfffb, 0x1, "22454fc660ecd2b74e6898c0a87d50a0d2e605b3e57cc866d75130aff0f5c7ad38524f62acf4006a8afb70b596b0d2e162712b8b0ac94c57f12f2a970db3889305e6c29e627d80947cffee601ab3e0850bbc944b9ce443eb16a7f533b23621917e392d9238311b5aff4bad7dab9b0b21dba475cefac88eeb841a34cf6d259cfd3419a4bb079419ab74fcdd77d9d73fd40b41c0a98c9b28e999537abcd90b89169814237fc6ec29d4abc91f8f1a35828c3950576e823665f070bc274ecd230697d13a9f903ed4c51d66aa6a51b9c9b40f14fbc71a7971457387546d661ae580b0585bb2347a432fbf04c21ee849ee1d52"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x0, "88eee3", 0x800, 0x81, "e337bbfff8e9028cd52f1b26819cd4093ac48923c410bdede2df3f216cd375ab2202c555b15c050421c82cf2c43c23152caf4c3ccdca8ee80c928fd0f7be42e3b63dace5e5eab803e931a601f93194bf9973ddcbfab69a6900750a03f1fbc8f836c7ef921a552ca3d1beb3939d3f80fe1e75f9c6ffdc3c67dcbbb62720e400031db580f53a361162fa29e924f4118010cb999628bd18871d61569de814621a459e6f5026b407a2ad23a54094a019ecd5aaf605d9a18f8d1fe18acb86caf7bd66c238a75876d4b23610bd56bc09a8602c3d1c34906d133b85a44d6c6c9fedc1614daa40d880ea641ec41a5deb46fdb358"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb, 0x9, "09b078", 0x0, 0x80, "9f5ab2ed15722db9207324683995fdde4139dc9c87079257ff1a8d21557de807a6879ad3453dd914550a72bdee087f9f35cd6db5d520be1e2eb56d8c147ea593355389038d07ac161188004a2efba9a69031adae5c5354a7bcf9a151ea03cfecdd75b22024be284a494a766629f196eaefef70c19deabf477e83b2317fe39b51c4438034a5b93fad6553b7af3d1df0cabe3ff3d4d616a79b4b60f96f9cd432b33eb84481e50a6e13b563957a200d70fcb3bbdfbee52b85ff527f6eada336eeae8a76e5c8977db235fb5426b6870a2aed460ebbe5818f1fb4ad8a225609f70f059aa05153ad43b580eabd6fc1e5fc968f"}, {@none, 0x2, 0x4, "b35b6a", 0x9, 0x1, "74ee621f0b0b49c7a7a7fd4f32292b577e47cd5e8b06748d1fb0e0ce16e2ec956017358e5ef18aafc6c8f8930b7ffb1bd4c8c598eee1ef0c69af0266716d84fe813268656faf8529dbb550d612240f3fb897897071ce1b2fc800c9bfbef6034708d40da5a2a5e561e13e76f896b234f3807ff6817f41b85b2ca2fdbb2f9717699b9e3af5ea812dd74eff47d83082a9f4b85acb3349f7c6d2de9fd212508c89f100d584fc6bd71f258a6c322a5d5c79fd49d8d96e7207dfca2b881d07ff64e7da4851a9b45f0abda8fdc30194eb4f749f92474e9daba4fae4aa64521ddb480a109abc2840e1e5f4c7308a2ae0c2496374"}, {@any, 0x54, 0xaf, "057e2f", 0xc7, 0x40, "8809f4a78f0aa916bc9d0be7bc774c7241772e31f7eb2aae71c3e46f0878534bf5455cfcb55488ac944d02262420926e1846d0a161ea7b577a218c1b528422b2e3fb29753e4bb90d1df9d0660cf8d6ad87c81a57e11374eb4eaf5ca779e8e3be753648e9b684bbb493b54d63375562777a5b576b474416bdfcd1f1c3f97789daed5f8848235f7d539b488b78e2a54a1b7a9a9873643b8f59dede4b361d9095476fd3b7a891864e10e739c7492f0ff19e11a90ccf387f48832b0c9529e805c3fd566216b843286c656a5087427282baa17ff5c54c8c771c3cc3d9756dc1c7ef63dae5eec05be357d3713e704f481c175b"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x89, 0x2, "dd30be", 0x6000, 0x7, "9902b91b563d5c3b6abb02f22b359ef2dde8c03d702e4a7abc32464b0e880e678107e416d77b4b9bab185d66956865c9b1d1ef46dc4098269b4bca59e14a5b9e69a33854ea585c6c8186f65e6797303acea8d402843eba990398a9866eca5468b2a08f7d594e3c452662cb267cc1c9d9cc4298ef653661737ea164903e359a6c339e36eb25b9fd47fdd5131b445a566a6782982deb84eedc03f17785e5cc4d5bc57ace90debb478be86b1e410f653c6750e9e42166027fab16dc11fc9e3b473bed1d25bf3584d13939549840510816d916691d1247d6e045e1ec7ad00d0f4b1dd5e0a0ac4bace35627e643e3c8d0d795"}]}}}, 0x5f8) (async) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xff, 0x2}, {0x5}}}}, 0xf) [ 347.415745][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 347.424259][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 347.446274][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:57 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xf) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f00000001c0)='1', 0x1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) 23:06:57 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0xf9, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) [ 347.467553][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 347.473586][ T15] usbhid: probe of 4-1:0.0 failed with error -71 [ 347.493051][ T15] usb 4-1: USB disconnect, device number 69 23:06:57 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0xf9, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0xf9, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) (async) [ 347.523522][ T3655] Bluetooth: hci1: wrong event for mode 0 23:06:57 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0xf9, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) [ 347.690845][ T3655] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 347.947348][ T15] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 348.317322][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.328569][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.338888][ T15] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 348.348349][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.358534][ T15] usb 4-1: config 0 descriptor?? 23:06:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) r1 = syz_usb_connect(0x1, 0x32e, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x36, 0xa7, 0x41, 0x20, 0x1bc7, 0x1072, 0x7b3b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31c, 0x2, 0x9, 0x3, 0x60, 0x7f, [{{0x9, 0x4, 0xe2, 0x9, 0x1, 0xff, 0x4, 0x99, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "a9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x600, 0x3ff, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0x70}, [@acm={0x4, 0x24, 0x2, 0x6}, @acm={0x4}]}, @generic={0xc2, 0x21, "bd3d9adad920ee74ba4c60c616c44a3ab3bba711b0c38fae52dc439b0471153f0d54aaee95d72571e146180cd540a50bb7ef177174d204b09e05283544174ec36edcae414f7b93896fbabe277f8591565ec52dab94079d4a0a6bb72c518d7eb073e7062b8178b50523e1a5d9c83559cdc7220906e7b92b2f7b5b33a50af9448f1964d4a3bfc0381389ffb46c8deb776ba77bfb0a3e43fea498ae19490b0b8783d4f9aeacceb8cde85b4c28b49eb678973a8bf28f5ad6c71b2c6a6312dbf717ec"}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0xaf, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x9}]}}]}}, {{0x9, 0x4, 0x82, 0x7f, 0x3, 0xe5, 0x42, 0xc0, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "190b"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x73c4, 0xc42, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x2, 0x1b, 0x81, 0x7, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0xe}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @generic={0xcd, 0x5, "d22aad95a36950e022983d9c2db4d1d8fac70d9ca3bcd55970a51c89e0da191da8c8eae52ffbddc15d88a05e8b40eb5913ba68cfe737e7a3eff1f0e4b878a4f0e476a617b13d1673a8785ca74c14b201d08a4ad40f5ec86ca974ddc3346e31ee74c894a074ccdb01cb20a12b53474686720f70a27ff2ef13f6b765e46fc350e30efaa086e8f83afb96d413f861bf9b456f5dd63bf0f41cea681211b93b30236728b8af93841c6b9c196a4b155b7506af10f482b25f50f4afb20c84f76fc151eba4c0e46d0df0e2869db1fd"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7fff}, @generic={0xd0, 0xc, "b40a3ebf777ce0a3eba38dc6086f3092eae6a82d69044caf83b407d430cce3380a0b413b6beea27bb0a40db4d4c7c97780b8ce8b470676fc3f19f6c5ccdde86d912fea13a14bb5cae907d0529eb5d63eb9c29eaf53b4635def9ed9089613f615986115d9bac5f154e3ec040f3daf166e92643268a959b963eccea9a94d776673ce220e21b578e02ea934db602229d4d2bb9ac52494f5510a812857996ac5bb9423669454492be0dac5daddfa75ba813378e233d3f514dad7047432374bf5caa5f90ac63447a70846c9fdf73e9dfd"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x7, 0x80, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7ff}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0x1, 0xe8, 0xff, 0x1}, 0x10f, &(0x7f0000000500)={0x5, 0xf, 0x10f, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fffff7, 0xf00, 0x7, [0xff0000, 0xc0, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x81, 0x8, 0x80, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8d, 0x4, 0x100}, @generic={0xbe, 0x10, 0x3, "51069f7aea6dd8db983d6eaeb1cd3d0a9a3b4f056933c55cc0f2a0be9dfa490fe9ea8316d4ecae0ed4c0357b0258bc79bebe043a4878fcb6473d5e6d2b39c14822acf8f10bda503d563a5a0258dabfd5eb2d3263613e25e15de1c6efd87e5c6fc8a8b73bcdf1a92cca584cee57537b654da52a29f464ead7ea9df8dfd65503116efed4e82022f6ca21c3965f4ad3cf688d365ee389d8289b0e6770df849cf8dd1a96cc4aa69883971d92d39a7dfb226bfef27ea37fbce53e59cb81"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x7fffc00, 0xf00, 0x17, [0x3f00, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x0, 0x4, 0x50, 0x6}]}, 0x2, [{0x70, &(0x7f0000000100)=@string={0x70, 0x3, "b44c352745593d881c2b8ffb9a5e4c8bd5d31e9150e8677f0c7f22b24684aaa20a87beff58157a065557678d23214aac0109f02431d35d579ab12e276c08a20699e371f67eb38cd0fee533a745dc2bb073299aa6c156c9f5926e0d3dbc8ccab679d22a4adb2f1d00c59f40a53050"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x14, &(0x7f0000000680)={0x40, 0xa, 0xa8, {0xa8, 0x21, "c541237d9b5011230e5f83798d3d1b5cac154e4ba14fed87b30cd0fd78dca6d139d766c6c279c0d4cb9fdc99b7a2a533823d62f8d029b5aa67849a0d1f98d5086a93ba55bba8139db7cfd10db93fc8a2f41b4df941c2247c1f5f3c7c51b7fe3a8ca82a47c980d7a70acb46edb6035d40759a44658ba8201ce0be319747784ab24a98496019357e9038e9834f94bd15ab19b66978aca0dc9c947b9f35b663f8940224856a40aa"}}, &(0x7f0000000740)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "bf376d3601add8da16805f49e7e6985940046a23f37389b74e5f5698f87f6a4f86ebe91171682064ab9622a256f7a969ba0e65eaac2b898e525360aefc5a8613c662bcad60af1ccc0f9a5f762033a81e0249855f53949d3070e06fdd600ffa9f17b64c07b08f9f9261d3d6ab137ce81e5964ba6f7ebdea3a30a88215dd60326840c62093e19f2b8093911bc5af2c1e1a42e65dcdcf28e72739e36d219581bd87ab7b1e6cbe298d8a85777e3e73e88b9e3a"}}, &(0x7f0000000800)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x5, "0300"}, @local=@item_4={0x3, 0x2, 0x3, "2bc1645c"}, @main=@item_012={0x2, 0x0, 0xc, "2ca3"}, @main=@item_012={0x2, 0x0, 0x9, "acf2"}, @local=@item_4={0x3, 0x2, 0x9, "695b9ed6"}, @global=@item_4={0x3, 0x1, 0x9, "8fdac5ec"}, @main=@item_012={0x2, 0x0, 0x9, "f13c"}, @main=@item_4={0x3, 0x0, 0x9, "d89fb6d2"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x40, 0x1, {0x22, 0x558}}}}, &(0x7f0000000ac0)={0x18, &(0x7f00000008c0)={0x40, 0x14, 0xaf, "9f07dbe60216948288adcbbb3c5f9d77957b1b873f2c5c48f30b7cc548b37da93ee63ea1a717ab3b6a10fcc3fea0f01fd4364b1512b6a9e19dffa9f203e27f59b7d651e373505128ba3aa231004c0a25d588a24dd26c042b78b64d4ac17a18e438f52fe70fd1b9d0f63cbabc1f47ebee3a25311f12009fa55591dc053e222a50ad740192e79079a24e3ea5396b3f59e7b523e6ca771c9dff76f445b6fa639082c29105e50b2e12bfd9aab4b986cd3d"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x1, 0x5f, "36b12b4e3d42288c351daefda1827e3b006be70e6bfed552b2b35ad1be4820186ae930172e517c42b735a0d134b8f69914d6b903c5cc7a19bbc808bc63c39bb6cdf283bf106930c420ae9217612abb673a983838005a50529d7f6c991e34db"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x20}}) 23:06:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb3}, "8cab70352c41a1c2d257491275d42fa1a9a5581fd1ebea516d5f5d65fca74c37c70d0184087446e7f9508167ccef67ad01164851edcccb691f997df4d118d1752cbcfc356dda0b2daeadb386734fccb632c5e8ef8a1403ce02311a85b2b2adb4f966b91b512c44f1d87c4be640ef0ade1675ff4ea2de76114092f1a7f3dc1235fd6df435525a3fcff5310742aa5797a9cb6d3d0abb22e8bb25ab6be2d753c471b6110aa93cdcfc74901223f17efcfda17149b0"}, 0xb7) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000001180)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb3}, "8cab70352c41a1c2d257491275d42fa1a9a5581fd1ebea516d5f5d65fca74c37c70d0184087446e7f9508167ccef67ad01164851edcccb691f997df4d118d1752cbcfc356dda0b2daeadb386734fccb632c5e8ef8a1403ce02311a85b2b2adb4f966b91b512c44f1d87c4be640ef0ade1675ff4ea2de76114092f1a7f3dc1235fd6df435525a3fcff5310742aa5797a9cb6d3d0abb22e8bb25ab6be2d753c471b6110aa93cdcfc74901223f17efcfda17149b0"}, 0xb7) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) (async) syz_emit_vhci(&(0x7f0000001180)=@HCI_VENDOR_PKT, 0x2) (async) 23:06:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="045403000000eb8d92197458a17ac2cc886183fcd420e644ee96e89cfc3e4c6654f12bfabeed41", @ANYRESOCT=0x0, @ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r2, @ANYRESDEC=r2], 0x6) 23:06:59 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'vlan0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'macvlan1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'macvlan1\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000002600)={0x18, 0x0, {0x0, @link_local, 'bridge0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'gre0\x00'}}, 0x1e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:59 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xf) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) write$6lowpan_enable(r4, &(0x7f00000001c0)='1', 0x1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) 23:06:59 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/93) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000280)=""/139) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x7db}}}, 0xd) [ 348.819046][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.828261][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:06:59 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/93) (async) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000280)=""/139) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x7db}}}, 0xd) [ 348.885538][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:06:59 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'vlan0\x00'}}, 0x1e) (async, rerun: 64) r1 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'macvlan1\x00'}}, 0x1e) (async, rerun: 64) r2 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'macvlan1\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000002600)={0x18, 0x0, {0x0, @link_local, 'bridge0\x00'}}, 0x1e) (async, rerun: 64) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'gre0\x00'}}, 0x1e) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:06:59 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb3}, "8cab70352c41a1c2d257491275d42fa1a9a5581fd1ebea516d5f5d65fca74c37c70d0184087446e7f9508167ccef67ad01164851edcccb691f997df4d118d1752cbcfc356dda0b2daeadb386734fccb632c5e8ef8a1403ce02311a85b2b2adb4f966b91b512c44f1d87c4be640ef0ade1675ff4ea2de76114092f1a7f3dc1235fd6df435525a3fcff5310742aa5797a9cb6d3d0abb22e8bb25ab6be2d753c471b6110aa93cdcfc74901223f17efcfda17149b0"}, 0xb7) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "e5c259630650faa9d85dacf75770ae7e839a49a520b0ec51831353cae7495c7ed18fabb5b84ede1b3529ef0285b6d6427133ab70d5118a791456003e052de5d780a2a53d73c7603543621a978b1fc4a5eddeef262c55e86a73e280c82ee2f7ca502b48a6de80383faeabaf40e47617cbe5617eefabf5ba163bb3c086e475c9af16f2a1afad6ab4b4527933cc5c99448a46965b91d022a25c8346d3926ce93fd91cf8b3c10c676d7578f3b2413f5bf7ac677adc6e96dfeefd725f4708c992c5b1a890a927c833a67241d2cd121fe12268c6621aafcf5b25727d91d73621b2ee998084b0f7fdb2968b4977507292d41fd90b91f5a7c0bcd539f90665139ab6c778e283729feac7d4c87af6c8adcc6667354c96d7f7e9bb72c76e455c15d279342956831116e12b5f90d229b15c6127dcc81b6b7cc1a633fddc59d46264b7fd65674e97be28474df888512cce5ec5ffa356ff2eba3d8fbd4991bb19be502cd38dbc98b3a7569326477cbd40824aed293b93cb03357231e36baaaf68ba0939932b8e3fb40fe7a3bee56e171082472dc7f6616d42b0665bd5a6f87fea8fe65808097ab787371e64276cb4d25876753c12425faa07e3052e6cc5d2721f3fe9094c5d7cb4dbc1c367e66055ca62c7f409e0da179e755c124762b19b4459a3423fdcde57d5a16e485e7d0eabe6cc5e8e68e69add2395877ffa2fcd1c3efc24056cf88e3b2a38d6e7803c08bc79e910442910b5151ac0f984df7cb87bbb5608fdaa3a5b9c87a7d6a7ec1bc2b572c6dc05e140b73ee4796bcc3b8c97416825ed221372328505f867f152b857ef5a56d103d501ae7b7371a99c2f6795ae662c4a677d448988185892c18e896722ef681115c1db511056e159c8078078ca8f110b699449a70d2376b8edc010ffa1d49e6a40c00fd59cc1eb25e5f82e38f9c5184e8775139e76031280242ebc0ae95a9a821b051dadf758a7ad63744c92e0975220a45733dc928bf3adc28666ac737d215f2460201842de32ca6cb922fd9b098ae9ac6ad28ff1094024097cfc170314772600db836624ed30323e6a00da92f2ba5fca77a8bfb7d6d75694e667a5450ff03e636063a4f5b507a66cc66e3a7b1cc1f1dad6efc25ea6c4e8c2b785eff94e886928dfcda321ffa257a502128d404649fcfdb8cfd937c29571697fd217e1b8b89880f6324c3e16fb9f27ad28f250f5bf696cba9d7990fee510936303300fa52fda17cde479d61fef507b7c0051d6674b7ee38ff604a89368f83af466104af4406d6d917012c378a0385f21bdec58753602223d257723337f136c32f0b689269377148718699ea5be5010e2774ec50319ebafee92d946ab00fd418abbc95021199c0ece93c7a796c065dea6f1115bdc382b99b78bae57f7ee1a6e2a9e9015ac8bd216736034fc33baa67fde23f597eea45d7e08e5fd1dab254f9666d7b5acea682f9bddb9086abebadc8400ab3a17654fda47b0bddf59d176ca0e5327c404dde4b6fbbab10660d302d7302469203353f1cba804be2478c26deab52310be730da5d865e453adfdcc49146c994cee56deddbd0478856e7776ece22064b5e46b3a0504937d6fb29351f76aef0f1b7eec66ae2d85522980017df5963d963fb5c39c44515f244734e822ff3434c78ca87970e26381e0c4f518bbdf918a1878ac46ae473ad823eba0ea95dc1c42d4c89f1db670fbf45810a182f6377fde99499a3d2e142fad8a3fa3302705c905c1028658612c83305776a0ea1e4fae25eea593e6f94778eba88d2770421cd3139c6297562dfa13472a12d7380fb3ded43be90c4f3171bf639cb6dc56c55988c3e3f9b74cff0b0d86ceba4c935d6c7d62ebac1fb838c5733a68c8ffbe8b9be3833051c3ce8fc69021ce49a210a0f70c532c3b6c35aa7af2a72b6be212a9f5ac55b5fda3b02e6c704f0da40a83d422ddfad33e91fe471c401d671d7a237e1c59a98e9e30012d2bdfda823fcd59583ab92275fe15cd75cfd60c52f54a80a3d49b984f2480fc0d9842092efd7ef77d9469b407de6d603108625ab32c020c135b073eb20ac9a20618b4f4759c7c9fd0a6707f4504d8444c9087c8d8d2e6c07147b2fcdeeb1f0188acf8bfa38ee836982040be6bd24d7a99cf9915a1693a188a56afcfe2dbfd091cfc69b6111fb15bf05688060452ecbdeaa40f9a6094b07cf65fc3c04c8aae10691d20aef676fc8857c29a137eac49d8669c19db199662e354c24b2354fd07fcf0645e2bc51720f6aca60a0e22c1666f5a61dd03810346d5ca4777ea7721d25bd908f9fa8d28898e37f88c132c6aaa8d195d084d09160ec83eb1a7dea60e55f64d2264f1db47764b9a492aacd053a30ee5e4279a8b89a0a05c2f6ade8b953269bf4078dacb776d0ded8e89bea90d988da1e5fe265cdbfa4b4191000200f5354c3def0cdadf21a478f9f67b6bf4977603a80bab31632830ce963a957f9bc4f13ef27915d9f259d364b60884493b94aebb46d90b1c06d8770a36cd54074b144cbd5dfd5079d99782f5f81be1c7478f22ac5056d58da2b10a47380c985dcea370a22ee59968ab0116a7b4763d5d0ae7c7dd2499cbaaee99a6248d20c85c150505ab04eacc7151b980803302e83ac8e8e30143685006b8ed8863127fb9a670b918946a6da90716583b5589a91cb3d3847104cc996b95b0697f4ee7c0bb6f0ce4b7a99926e3d70756aa6c35bb14938ac6c68ebbc05ccdbada0502e77dcd5bfd932132d47605f6e42d9941986883971af8cadce3b1e8a346ad8917029ae33fbc4cbec6fa11350ccb665fcf6e1f8cd34091f47c687e0d73f85a452395529f0a0a2599a32f88e52d7031818808505c0b7eb191660ec88668cf3cd9763851a1d36ebb91bc5488e3391984cff49f9f815be6b8747ec5bf5704a6dba39551ff5a94d1103129c4054a4a2a1e50daeda88cde61a7e7bc33b6ae713a91c288ee66721c4829e950891c586e39d6d03f44cddf342f63809f7a9eff6edb8bd20bd7e2d1ca15c6f1fffead1e61266a4878b99b86bef95d7702397908099bc6d532b44d6a693d8294db22ec47610badf2d61182d33a1c56bc1e45b302fd6d6939fe2e80df699191c2b6f319eb22e4dad1b1a8f28bef1d63037b94b27a87f92a0364881052fab8ed53a4e4ddac75cccf3bc1108eae10a966dad723025f3e22da2f9d8115fd33e19688419ecd70e8bb6ea5df6cc0ff6f5dad337f88562270b711d2deb7732ee7a0b01b51a686a351df3c4ac704c2104be1064933a152af3f1414d011869fa182511b04b26dd19a36254a549d8bcd6b4f2c4714d9347036ae735aede715832827a252e5d9364990a0ca0df5789072b0aeb0f7e52f2a94395e47b0e1060c99d42a487b20dd9ccb18d8055d81cb27b8a9195a37734156d33ac01331b1818552f855616a00a6e7d2e2b30bb26d89a8f2ab7450045fb874ed9736fbb2d17ff7d9dee93f2201c108122554b7eeea6c0016baa7517493051f4320a40f6c3ee4316298fca935f86de93eba90e034808d0da5c3267e2af11f3e50725ddf4b1d2382ccfebaf5610f74fe07d96694cc46645995a987faa8254301fb9a2ac3c0708d5d391cfc037fdf08f68e4d069e50526b463a0a48df6b8dfe028e2ae9ff69544c61e801cc97a0cc4344d65e7aa673e43e301373e21345986d317b4592906b6de9f02ad87574c5eb4362199ea7dff5e2f637718ea7d834b8f4a2bdb15fdda4842eca32461e6a42b33ab70dce53e317a580a58ef4bae3bdf9e69cf4cfbeb4a9f3d3cb814d7b2a8c603846a01e65df640c9e2a11305afc4927335c95431c45ce3a5cf01b0ef49e3954e9d5cd5cd10ccbf1164cd60d0e4cbfc27c60078000e089f9c14fd2e1d06e427491b33da4470f58e5f77fb820925a213731e7f1485557b56635da780e00a91205140c86b27e0ad1212ea555071a11b17f5527000447d0ceca74e538ff3a19bc5e185ded1d7f049472197fe929396006fb74ba70154631a2b5db7b9934c335331071dbaf03f6b93a2b64db0ff9ab327278f045a3158054d51166542d4655799c86373ba1640000364bdaaaef9a3622a845749a848a55b8b1d39a6966592e58f4865f7b460f919c276b89f1da7d2824b375558c674ce267b4282c1f471046d6e87066b7362bf50908467fa036d179c23e6695a87d4f91bfcd4b21215339d3ade2235d7dec360e2a3a47cbcea1c9bfeb83687e7d0e2ca482eed1feaf210155896d9d5f4778e0865e6155207af8eb3c07e184cb65eefeb778c0da6a49780d81fc5ac71f03c9a55308c43f0f2786ec5e0508cb7a02a3bcad30dc501907843f463d127387674c54bb35ba3aca8ba0e050afadc27d5c7d912dec4378a47b18e6d26e5973e4b27401f57bb12fc2803ec0b2ee27524ec24e0ce242d65ead31d9caee0d42e676f71f0aa94d9b3a6bfcfdb541fd9fdf8832d6cc27c171c4a914c6ec9db502b03b02e78a29a50b1c1ad473af399ae5f288eea5300efbf074cc71f3a615c8f1f7ba2cebe2f2564cf2583f932a248b6e56a1e2fdc8bc6077f236aa79ab453fae82c8af46252e87a2c38393affa120866d7c51b2e4b13b2ae6911fd15bf34019fbe208c4c6110bb276e768da3dce512825339531737942f513520a2c77315c86819cb6b8353de1c855f047c79d20aca238e23b547e6ea2242202f2a367a8b985af1a0475f75c97822f29df015928c06ff8ed48fe84d35452e7b899d6d704f92243e75bb01c5a085d13af85c9bab40f3a68a5bd6faca58abe2e60a3a8e3f69c5f33c5ed574cd16b46405030338f4dba08c970e77fb66da78171020a4fb38cffd5cb83d755055d0bc348a43933dff4da3b0776bac172ebbcb5ae697b30937e56caa57ce37f29ce94926554fdc6a9ed98841e13d5d426b37c868b2468586e8a3c112a6914346fec9f2ac519c2644afceed85221c4c399bdee05a3c2ce9edde52068ec6520c2ac0e83a1e375aec7b3de4e877f54a88d82ec9c4e3538ebd9eeab2cd83e90b707e0c409c76d1d656734136532ffdc248ba1513ab67a68057b64d7feded810b10eb561025690eefd0f4f5660f00d96faf7303f7b74921a1bff16a1cfaa45ed64d6f6eab979a4ff68288aa783016efa464bab83d615f3c84706a1ca89bbbc68e257c4ed21deaf10d9027ed4571906e3e029121fef2047d0c88427f31ee1414fe5bccb79b95b2e29cc0844be87cc0d914bb077d421435d8055c79106ea6179529e0ad0da96dfb1d66d673bc250dbff9191d44d5dec0a7d38729a758ac1b6fb8d95c68ecb9d202d3af443bc7e543a19ad9670f6ec03bb755656213e164d19ec02504d76341e9fc7511a099277838f917b4f73c38bbd8aeeba84d939106d6df3122356acb8516b63b9321e7c375212324cb09393a6db88ead7b4f02b881e5d6f7ac086ee99cb56eeb3a3051c855e6c4b39c3a5cfe09be8f7b0c049028f706cd2165bc1084be1e26c0ae459bd67d9e4dddb2ed84039efdccbaf1bef69d73e04ae25b28b798d4c3c064b9fe4374e7cc29df7bd60b6770153e1a1b440bb385a06330b69e775a9a20e4a26d211bcf86317de8a3e7a901fcca103c7f0930d4de0dbb35951580a803144e2e34a007ba041531726c24ab05b88b530658f516dc8119491ece8dea5a8942c5aad6bf1d83f838b27e2fd5c34364d0e22277aa7d0ac541fbde1029bde02af4c5fae8a36160851548096c3c32932f9ccf94281ad87e93238fc84fa7942581e12efdc713ec6d1947b81d8e64a1a193edc9fdc11a098b8488c7b5681107022d19092ad3"}, 0x1004) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) (rerun: 64) syz_emit_vhci(&(0x7f0000001180)=@HCI_VENDOR_PKT, 0x2) [ 348.927571][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 348.934053][ T15] usbhid: probe of 4-1:0.0 failed with error -71 23:06:59 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:06:59 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 348.986959][ T3655] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 349.019373][ T15] usb 4-1: USB disconnect, device number 70 23:06:59 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) [ 349.427290][ T15] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 349.787491][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.798617][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.809072][ T15] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 349.818538][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.830105][ T15] usb 4-1: config 0 descriptor?? [ 350.320517][ T15] ortek 0003:05A4:2000.0011: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 350.525007][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.533599][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.543326][ T15] usb 4-1: USB disconnect, device number 71 23:07:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x1, 0x32e, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x36, 0xa7, 0x41, 0x20, 0x1bc7, 0x1072, 0x7b3b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31c, 0x2, 0x9, 0x3, 0x60, 0x7f, [{{0x9, 0x4, 0xe2, 0x9, 0x1, 0xff, 0x4, 0x99, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "a9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x600, 0x3ff, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0x70}, [@acm={0x4, 0x24, 0x2, 0x6}, @acm={0x4}]}, @generic={0xc2, 0x21, "bd3d9adad920ee74ba4c60c616c44a3ab3bba711b0c38fae52dc439b0471153f0d54aaee95d72571e146180cd540a50bb7ef177174d204b09e05283544174ec36edcae414f7b93896fbabe277f8591565ec52dab94079d4a0a6bb72c518d7eb073e7062b8178b50523e1a5d9c83559cdc7220906e7b92b2f7b5b33a50af9448f1964d4a3bfc0381389ffb46c8deb776ba77bfb0a3e43fea498ae19490b0b8783d4f9aeacceb8cde85b4c28b49eb678973a8bf28f5ad6c71b2c6a6312dbf717ec"}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0xaf, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x9}]}}]}}, {{0x9, 0x4, 0x82, 0x7f, 0x3, 0xe5, 0x42, 0xc0, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "190b"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x73c4, 0xc42, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x2, 0x1b, 0x81, 0x7, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0xe}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @generic={0xcd, 0x5, "d22aad95a36950e022983d9c2db4d1d8fac70d9ca3bcd55970a51c89e0da191da8c8eae52ffbddc15d88a05e8b40eb5913ba68cfe737e7a3eff1f0e4b878a4f0e476a617b13d1673a8785ca74c14b201d08a4ad40f5ec86ca974ddc3346e31ee74c894a074ccdb01cb20a12b53474686720f70a27ff2ef13f6b765e46fc350e30efaa086e8f83afb96d413f861bf9b456f5dd63bf0f41cea681211b93b30236728b8af93841c6b9c196a4b155b7506af10f482b25f50f4afb20c84f76fc151eba4c0e46d0df0e2869db1fd"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7fff}, @generic={0xd0, 0xc, "b40a3ebf777ce0a3eba38dc6086f3092eae6a82d69044caf83b407d430cce3380a0b413b6beea27bb0a40db4d4c7c97780b8ce8b470676fc3f19f6c5ccdde86d912fea13a14bb5cae907d0529eb5d63eb9c29eaf53b4635def9ed9089613f615986115d9bac5f154e3ec040f3daf166e92643268a959b963eccea9a94d776673ce220e21b578e02ea934db602229d4d2bb9ac52494f5510a812857996ac5bb9423669454492be0dac5daddfa75ba813378e233d3f514dad7047432374bf5caa5f90ac63447a70846c9fdf73e9dfd"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x7, 0x80, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7ff}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0x1, 0xe8, 0xff, 0x1}, 0x10f, &(0x7f0000000500)={0x5, 0xf, 0x10f, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fffff7, 0xf00, 0x7, [0xff0000, 0xc0, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x81, 0x8, 0x80, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8d, 0x4, 0x100}, @generic={0xbe, 0x10, 0x3, "51069f7aea6dd8db983d6eaeb1cd3d0a9a3b4f056933c55cc0f2a0be9dfa490fe9ea8316d4ecae0ed4c0357b0258bc79bebe043a4878fcb6473d5e6d2b39c14822acf8f10bda503d563a5a0258dabfd5eb2d3263613e25e15de1c6efd87e5c6fc8a8b73bcdf1a92cca584cee57537b654da52a29f464ead7ea9df8dfd65503116efed4e82022f6ca21c3965f4ad3cf688d365ee389d8289b0e6770df849cf8dd1a96cc4aa69883971d92d39a7dfb226bfef27ea37fbce53e59cb81"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x7fffc00, 0xf00, 0x17, [0x3f00, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x0, 0x4, 0x50, 0x6}]}, 0x2, [{0x70, &(0x7f0000000100)=@string={0x70, 0x3, "b44c352745593d881c2b8ffb9a5e4c8bd5d31e9150e8677f0c7f22b24684aaa20a87beff58157a065557678d23214aac0109f02431d35d579ab12e276c08a20699e371f67eb38cd0fee533a745dc2bb073299aa6c156c9f5926e0d3dbc8ccab679d22a4adb2f1d00c59f40a53050"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x804}}]}) (rerun: 64) syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x14, &(0x7f0000000680)={0x40, 0xa, 0xa8, {0xa8, 0x21, "c541237d9b5011230e5f83798d3d1b5cac154e4ba14fed87b30cd0fd78dca6d139d766c6c279c0d4cb9fdc99b7a2a533823d62f8d029b5aa67849a0d1f98d5086a93ba55bba8139db7cfd10db93fc8a2f41b4df941c2247c1f5f3c7c51b7fe3a8ca82a47c980d7a70acb46edb6035d40759a44658ba8201ce0be319747784ab24a98496019357e9038e9834f94bd15ab19b66978aca0dc9c947b9f35b663f8940224856a40aa"}}, &(0x7f0000000740)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "bf376d3601add8da16805f49e7e6985940046a23f37389b74e5f5698f87f6a4f86ebe91171682064ab9622a256f7a969ba0e65eaac2b898e525360aefc5a8613c662bcad60af1ccc0f9a5f762033a81e0249855f53949d3070e06fdd600ffa9f17b64c07b08f9f9261d3d6ab137ce81e5964ba6f7ebdea3a30a88215dd60326840c62093e19f2b8093911bc5af2c1e1a42e65dcdcf28e72739e36d219581bd87ab7b1e6cbe298d8a85777e3e73e88b9e3a"}}, &(0x7f0000000800)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x5, "0300"}, @local=@item_4={0x3, 0x2, 0x3, "2bc1645c"}, @main=@item_012={0x2, 0x0, 0xc, "2ca3"}, @main=@item_012={0x2, 0x0, 0x9, "acf2"}, @local=@item_4={0x3, 0x2, 0x9, "695b9ed6"}, @global=@item_4={0x3, 0x1, 0x9, "8fdac5ec"}, @main=@item_012={0x2, 0x0, 0x9, "f13c"}, @main=@item_4={0x3, 0x0, 0x9, "d89fb6d2"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x40, 0x1, {0x22, 0x558}}}}, &(0x7f0000000ac0)={0x18, &(0x7f00000008c0)={0x40, 0x14, 0xaf, "9f07dbe60216948288adcbbb3c5f9d77957b1b873f2c5c48f30b7cc548b37da93ee63ea1a717ab3b6a10fcc3fea0f01fd4364b1512b6a9e19dffa9f203e27f59b7d651e373505128ba3aa231004c0a25d588a24dd26c042b78b64d4ac17a18e438f52fe70fd1b9d0f63cbabc1f47ebee3a25311f12009fa55591dc053e222a50ad740192e79079a24e3ea5396b3f59e7b523e6ca771c9dff76f445b6fa639082c29105e50b2e12bfd9aab4b986cd3d"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x1, 0x5f, "36b12b4e3d42288c351daefda1827e3b006be70e6bfed552b2b35ad1be4820186ae930172e517c42b735a0d134b8f69914d6b903c5cc7a19bbc808bc63c39bb6cdf283bf106930c420ae9217612abb673a983838005a50529d7f6c991e34db"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x20}}) 23:07:01 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'vlan0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'macvlan1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'macvlan1\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000002600)={0x18, 0x0, {0x0, @link_local, 'bridge0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'gre0\x00'}}, 0x1e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:07:01 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/93) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000280)=""/139) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x7db}}}, 0xd) 23:07:01 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'vlan0\x00'}}, 0x1e) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'macvlan1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev, 'macvlan1\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f0000002600)={0x18, 0x0, {0x0, @link_local, 'bridge0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'gre0\x00'}}, 0x1e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:07:01 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xf) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f00000001c0)='1', 0x1) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) 23:07:01 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xfd, 0x4}, {0x4a, 0x1}}}}, 0x11) 23:07:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0xfc, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@any, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04e70fbc2419e4f77d000104c900fa318100"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:07:01 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) [ 351.096440][ T3655] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 351.109616][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:07:01 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xfd, 0x4}, {0x4a, 0x1}}}}, 0x11) 23:07:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x7000}) 23:07:01 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0xfc, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@any, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04e70fbc2419e4f77d000104c900fa318100"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0xfc, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@any, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04e70fbc2419e4f77d000104c900fa318100"], 0x12) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) 23:07:01 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x20, 0xa}, {0x869d, 0xd7e, 0xfff, 0x40, 0x4}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x9, 0xc9, 0x1f, 0x0, "cfcbce1e6dc930d5"}}}, 0x10) [ 351.220813][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 351.387619][ T3724] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 351.757353][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.768315][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.778417][ T3724] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 351.788236][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.802579][ T3724] usb 4-1: config 0 descriptor?? [ 352.051509][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.060130][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.068557][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.077063][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.085664][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.094330][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.102976][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.112783][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.121295][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.125766][ T3724] ortek 0003:05A4:2000.0012: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 352.130842][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:07:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "e4e21b87"}]}}, 0x0}, 0x0) (async) r1 = syz_usb_connect(0x1, 0x32e, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x36, 0xa7, 0x41, 0x20, 0x1bc7, 0x1072, 0x7b3b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31c, 0x2, 0x9, 0x3, 0x60, 0x7f, [{{0x9, 0x4, 0xe2, 0x9, 0x1, 0xff, 0x4, 0x99, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "a9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x600, 0x3ff, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0x70}, [@acm={0x4, 0x24, 0x2, 0x6}, @acm={0x4}]}, @generic={0xc2, 0x21, "bd3d9adad920ee74ba4c60c616c44a3ab3bba711b0c38fae52dc439b0471153f0d54aaee95d72571e146180cd540a50bb7ef177174d204b09e05283544174ec36edcae414f7b93896fbabe277f8591565ec52dab94079d4a0a6bb72c518d7eb073e7062b8178b50523e1a5d9c83559cdc7220906e7b92b2f7b5b33a50af9448f1964d4a3bfc0381389ffb46c8deb776ba77bfb0a3e43fea498ae19490b0b8783d4f9aeacceb8cde85b4c28b49eb678973a8bf28f5ad6c71b2c6a6312dbf717ec"}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0xaf, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x9}]}}]}}, {{0x9, 0x4, 0x82, 0x7f, 0x3, 0xe5, 0x42, 0xc0, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "190b"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x73c4, 0xc42, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x2, 0x1b, 0x81, 0x7, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0xe}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @generic={0xcd, 0x5, "d22aad95a36950e022983d9c2db4d1d8fac70d9ca3bcd55970a51c89e0da191da8c8eae52ffbddc15d88a05e8b40eb5913ba68cfe737e7a3eff1f0e4b878a4f0e476a617b13d1673a8785ca74c14b201d08a4ad40f5ec86ca974ddc3346e31ee74c894a074ccdb01cb20a12b53474686720f70a27ff2ef13f6b765e46fc350e30efaa086e8f83afb96d413f861bf9b456f5dd63bf0f41cea681211b93b30236728b8af93841c6b9c196a4b155b7506af10f482b25f50f4afb20c84f76fc151eba4c0e46d0df0e2869db1fd"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7fff}, @generic={0xd0, 0xc, "b40a3ebf777ce0a3eba38dc6086f3092eae6a82d69044caf83b407d430cce3380a0b413b6beea27bb0a40db4d4c7c97780b8ce8b470676fc3f19f6c5ccdde86d912fea13a14bb5cae907d0529eb5d63eb9c29eaf53b4635def9ed9089613f615986115d9bac5f154e3ec040f3daf166e92643268a959b963eccea9a94d776673ce220e21b578e02ea934db602229d4d2bb9ac52494f5510a812857996ac5bb9423669454492be0dac5daddfa75ba813378e233d3f514dad7047432374bf5caa5f90ac63447a70846c9fdf73e9dfd"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x7, 0x80, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7ff}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0x1, 0xe8, 0xff, 0x1}, 0x10f, &(0x7f0000000500)={0x5, 0xf, 0x10f, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fffff7, 0xf00, 0x7, [0xff0000, 0xc0, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x81, 0x8, 0x80, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8d, 0x4, 0x100}, @generic={0xbe, 0x10, 0x3, "51069f7aea6dd8db983d6eaeb1cd3d0a9a3b4f056933c55cc0f2a0be9dfa490fe9ea8316d4ecae0ed4c0357b0258bc79bebe043a4878fcb6473d5e6d2b39c14822acf8f10bda503d563a5a0258dabfd5eb2d3263613e25e15de1c6efd87e5c6fc8a8b73bcdf1a92cca584cee57537b654da52a29f464ead7ea9df8dfd65503116efed4e82022f6ca21c3965f4ad3cf688d365ee389d8289b0e6770df849cf8dd1a96cc4aa69883971d92d39a7dfb226bfef27ea37fbce53e59cb81"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x7fffc00, 0xf00, 0x17, [0x3f00, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x0, 0x4, 0x50, 0x6}]}, 0x2, [{0x70, &(0x7f0000000100)=@string={0x70, 0x3, "b44c352745593d881c2b8ffb9a5e4c8bd5d31e9150e8677f0c7f22b24684aaa20a87beff58157a065557678d23214aac0109f02431d35d579ab12e276c08a20699e371f67eb38cd0fee533a745dc2bb073299aa6c156c9f5926e0d3dbc8ccab679d22a4adb2f1d00c59f40a53050"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x14, &(0x7f0000000680)={0x40, 0xa, 0xa8, {0xa8, 0x21, "c541237d9b5011230e5f83798d3d1b5cac154e4ba14fed87b30cd0fd78dca6d139d766c6c279c0d4cb9fdc99b7a2a533823d62f8d029b5aa67849a0d1f98d5086a93ba55bba8139db7cfd10db93fc8a2f41b4df941c2247c1f5f3c7c51b7fe3a8ca82a47c980d7a70acb46edb6035d40759a44658ba8201ce0be319747784ab24a98496019357e9038e9834f94bd15ab19b66978aca0dc9c947b9f35b663f8940224856a40aa"}}, &(0x7f0000000740)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "bf376d3601add8da16805f49e7e6985940046a23f37389b74e5f5698f87f6a4f86ebe91171682064ab9622a256f7a969ba0e65eaac2b898e525360aefc5a8613c662bcad60af1ccc0f9a5f762033a81e0249855f53949d3070e06fdd600ffa9f17b64c07b08f9f9261d3d6ab137ce81e5964ba6f7ebdea3a30a88215dd60326840c62093e19f2b8093911bc5af2c1e1a42e65dcdcf28e72739e36d219581bd87ab7b1e6cbe298d8a85777e3e73e88b9e3a"}}, &(0x7f0000000800)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x5, "0300"}, @local=@item_4={0x3, 0x2, 0x3, "2bc1645c"}, @main=@item_012={0x2, 0x0, 0xc, "2ca3"}, @main=@item_012={0x2, 0x0, 0x9, "acf2"}, @local=@item_4={0x3, 0x2, 0x9, "695b9ed6"}, @global=@item_4={0x3, 0x1, 0x9, "8fdac5ec"}, @main=@item_012={0x2, 0x0, 0x9, "f13c"}, @main=@item_4={0x3, 0x0, 0x9, "d89fb6d2"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x40, 0x1, {0x22, 0x558}}}}, &(0x7f0000000ac0)={0x18, &(0x7f00000008c0)={0x40, 0x14, 0xaf, "9f07dbe60216948288adcbbb3c5f9d77957b1b873f2c5c48f30b7cc548b37da93ee63ea1a717ab3b6a10fcc3fea0f01fd4364b1512b6a9e19dffa9f203e27f59b7d651e373505128ba3aa231004c0a25d588a24dd26c042b78b64d4ac17a18e438f52fe70fd1b9d0f63cbabc1f47ebee3a25311f12009fa55591dc053e222a50ad740192e79079a24e3ea5396b3f59e7b523e6ca771c9dff76f445b6fa639082c29105e50b2e12bfd9aab4b986cd3d"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x1, 0x5f, "36b12b4e3d42288c351daefda1827e3b006be70e6bfed552b2b35ad1be4820186ae930172e517c42b735a0d134b8f69914d6b903c5cc7a19bbc808bc63c39bb6cdf283bf106930c420ae9217612abb673a983838005a50529d7f6c991e34db"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x20}}) 23:07:04 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0xfc, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@any, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04e70fbc2419e4f77d000104c900fa318100"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:07:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x20, 0xa}, {0x869d, 0xd7e, 0xfff, 0x40, 0x4}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x9, 0xc9, 0x1f, 0x0, "cfcbce1e6dc930d5"}}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x20, 0xa}, {0x869d, 0xd7e, 0xfff, 0x40, 0x4}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x9, 0xc9, 0x1f, 0x0, "cfcbce1e6dc930d5"}}}, 0x10) (async) 23:07:04 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 23:07:04 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xfd, 0x4}, {0x4a, 0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xfd, 0x4}, {0x4a, 0x1}}}}, 0x11) (async) 23:07:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x7000}) 23:07:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x20, 0xa}, {0x869d, 0xd7e, 0xfff, 0x40, 0x4}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x9, 0xc9, 0x1f, 0x0, "cfcbce1e6dc930d5"}}}, 0x10) [ 354.134646][ T15] usb 4-1: USB disconnect, device number 72 [ 354.160014][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 354.171841][ T3655] Bluetooth: hci1: wrong event for mode 0 23:07:04 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 23:07:04 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4096, 0x1000) 23:07:04 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:07:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 354.216985][ T3653] Bluetooth: hci1: wrong event for mode 0 23:07:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x7000}) [ 354.368777][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 354.377785][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 354.627256][ T15] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 354.988242][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.999245][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.009051][ T15] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 355.018145][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.029759][ T15] usb 4-1: config 0 descriptor?? [ 355.491097][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.499737][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.509965][ T15] ortek 0003:05A4:2000.0013: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.3-1/input0 [ 355.713676][ T15] usb 4-1: USB disconnect, device number 73 23:07:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x600, 0xfd, 0x5, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xff, 0xb4}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3e, 0x7, 0x40, 0x10}, 0x6d, &(0x7f0000000100)={0x5, 0xf, 0x6d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x4, 0x4, 0x20, 0xa2}, @generic={0x57, 0x10, 0x2, "72f6c320e8ea6563afcdafd7ae92a859ec0bad37dc3c265ff6d4eb1f94c138fb13e5296b0706fad39dcbfd53cb0e1ac972fe24cfbd70ef59929b04cd25183047c657387494b0e4be0964b0cc52e5e57ad7b11e8a"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="17036241669416f367cbccb454906cdb11158f00"/33]}, {0x21, &(0x7f0000000600)=ANY=[@ANYBLOB="219bf7d522e7e3eec16f0d5fa3695809cfee7f4568ed435a1700db4a02020000494e7cbeb3a5e9a7a5f05aa6d6cfee34f1658c493dbcfa3ea5"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xe0, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x2, 0x1, 0x3, 0xf0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e662"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7f, 0x6, 0x7f}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@obex={0x5, 0x24, 0x15, 0x200}, @mdlm_detail={0x6b, 0x24, 0x13, 0xa0, "77dccf4ffaa93f0d648736a5ecf73876a96722f0dab436606515b41fca726449502851f73d23a8d13f4d7c8fcb7a01d8ddfcf9226f24492b50e425e58f02615ef5a8b5b74be5858f3d1ca66667bb9e7e9d7e99a350815f1fd5d17702304572e6c26c11867d17eb"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x78, 0x2c, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x1ff, 0x0, 0x8, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x1f, 0x7, 0xff, 0x40, 0x1}, 0x47, &(0x7f0000000400)={0x5, 0xf, 0x47, 0x2, [@ptm_cap={0x3}, @generic={0x3f, 0x10, 0x1, "ce25870ce2dc0385a6acac58ff748d3708ff1c0f4dda2d7c352baff8f4cc6a1b4329630915740e55e883090fcefd7e7e3297a4519c00fa66e9358eb9"}]}, 0x2, [{0xba, &(0x7f0000000480)=@string={0xba, 0x3, "c4d5ca639488fea2bf7bb9fa84d7fd3adbdd25a766d427d8dd2ffc8e938a14ac4e7b64db24c387fd6774582215919f1daf95533f15cb390ec0a8aa2bd45ad6c9af77340af465383b2b58580f2e74178051b4b6c11514f9852ed34e4f37bc3c7c6d839d8ea19972f8e36afab3a1bde968ef074b46fa5ce1383f5c61f415d2d18de745ba704dfd7fd7d01542dacd303d71793a950cdb156dae2e342b2357e800242b5e4c3641252e990d0a2d23cf720c94b83a8b64a0064704"}}, {0x77, &(0x7f0000000540)=@string={0x77, 0x3, "90bbd1656a131521b6da7266fcffe0846427dd050cb9f840ebf165c09169b0f161d8a0f54b713bd7484d50c508013635a57686f8524674d7faf10a089769aba256d966d68ab4b613d7308aff56ab1da66ecb8e1b3fd463a3e52698d22985a29347ff4bccb83ddbe7ccb3bad712cbc1bb65b52fac22"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c221c00000033c09009c2d2070fc02de2"], 0x0}, 0x0) 23:07:06 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:07:06 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) 23:07:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:07:06 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4096, 0x1000) 23:07:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, 0x0, 0xfff, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) 23:07:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, 0x0, 0xfff, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) (async) keyctl$negate(0xd, 0x0, 0xfff, r0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) (async) 23:07:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 356.253530][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 356.259734][ T3653] Bluetooth: hci1: wrong event for mode 0 23:07:06 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4096, 0x1000) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4096, 0x1000) (async) 23:07:06 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) 23:07:06 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) pipe(&(0x7f00000000c0)) (async) openat$cgroup_ro(r0, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) 23:07:06 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x429, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x2, 0x8}, {0x0, 0x8, 0x800, 0x3}}, @l2cap_info_req={{0xa, 0xdb, 0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x1000}}, @l2cap_conn_req={{0x2, 0x6, 0x4}, {0x3, 0x403}}]}}, 0x31) [ 356.320305][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 356.440911][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 356.587554][ T3724] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 356.957436][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.968502][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.978801][ T3724] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 356.988439][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.000125][ T3724] usb 4-1: config 0 descriptor?? [ 357.557494][ T3724] usbhid 4-1:0.0: can't add hid device: -71 [ 357.563600][ T3724] usbhid: probe of 4-1:0.0 failed with error -71 [ 357.571957][ T3724] usb 4-1: USB disconnect, device number 74 23:07:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x600, 0xfd, 0x5, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xff, 0xb4}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3e, 0x7, 0x40, 0x10}, 0x6d, &(0x7f0000000100)={0x5, 0xf, 0x6d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x4, 0x4, 0x20, 0xa2}, @generic={0x57, 0x10, 0x2, "72f6c320e8ea6563afcdafd7ae92a859ec0bad37dc3c265ff6d4eb1f94c138fb13e5296b0706fad39dcbfd53cb0e1ac972fe24cfbd70ef59929b04cd25183047c657387494b0e4be0964b0cc52e5e57ad7b11e8a"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="17036241669416f367cbccb454906cdb11158f00"/33]}, {0x21, &(0x7f0000000600)=ANY=[@ANYBLOB="219bf7d522e7e3eec16f0d5fa3695809cfee7f4568ed435a1700db4a02020000494e7cbeb3a5e9a7a5f05aa6d6cfee34f1658c493dbcfa3ea5"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0xe0, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x2, 0x1, 0x3, 0xf0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e662"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7f, 0x6, 0x7f}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@obex={0x5, 0x24, 0x15, 0x200}, @mdlm_detail={0x6b, 0x24, 0x13, 0xa0, "77dccf4ffaa93f0d648736a5ecf73876a96722f0dab436606515b41fca726449502851f73d23a8d13f4d7c8fcb7a01d8ddfcf9226f24492b50e425e58f02615ef5a8b5b74be5858f3d1ca66667bb9e7e9d7e99a350815f1fd5d17702304572e6c26c11867d17eb"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x78, 0x2c, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x1ff, 0x0, 0x8, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x1f, 0x7, 0xff, 0x40, 0x1}, 0x47, &(0x7f0000000400)={0x5, 0xf, 0x47, 0x2, [@ptm_cap={0x3}, @generic={0x3f, 0x10, 0x1, "ce25870ce2dc0385a6acac58ff748d3708ff1c0f4dda2d7c352baff8f4cc6a1b4329630915740e55e883090fcefd7e7e3297a4519c00fa66e9358eb9"}]}, 0x2, [{0xba, &(0x7f0000000480)=@string={0xba, 0x3, "c4d5ca639488fea2bf7bb9fa84d7fd3adbdd25a766d427d8dd2ffc8e938a14ac4e7b64db24c387fd6774582215919f1daf95533f15cb390ec0a8aa2bd45ad6c9af77340af465383b2b58580f2e74178051b4b6c11514f9852ed34e4f37bc3c7c6d839d8ea19972f8e36afab3a1bde968ef074b46fa5ce1383f5c61f415d2d18de745ba704dfd7fd7d01542dacd303d71793a950cdb156dae2e342b2357e800242b5e4c3641252e990d0a2d23cf720c94b83a8b64a0064704"}}, {0x77, &(0x7f0000000540)=@string={0x77, 0x3, "90bbd1656a131521b6da7266fcffe0846427dd050cb9f840ebf165c09169b0f161d8a0f54b713bd7484d50c508013635a57686f8524674d7faf10a089769aba256d966d68ab4b613d7308aff56ab1da66ecb8e1b3fd463a3e52698d22985a29347ff4bccb83ddbe7ccb3bad712cbc1bb65b52fac22"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c221c00000033c09009c2d2070fc02de2"], 0x0}, 0x0) 23:07:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) 23:07:08 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 23:07:08 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, 0x0, 0xfff, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) 23:07:08 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_info_rsp={{0xb, 0x1, 0x36}, {0x6, 0x400, "7c3831778fa8df8ff0ae608d38a4f0cbfc360ad617074240ba17f35265520bc5b5a527894fd7588751e7a381cac70ad0e113"}}, @l2cap_conf_req={{0x4, 0x8, 0x24}, {0x40, 0x7, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_mtu={0x1, 0x2, 0xfc00}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x26, 0x1, 0x14, 0xb4e, 0x5}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 23:07:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1006}, [@IFLA_MASTER={0x8}, @IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in=@local, 0x4e21, 0x6, 0x4e24, 0x2, 0xa, 0x90, 0x20, 0x67, r2}, {0x7ff, 0x1f, 0x2, 0x0, 0x5, 0x3, 0x8, 0x8}, {0x1000, 0x2000, 0x2, 0x8}, 0x401, 0x0, 0x0, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x3c}, 0xa, @in6=@private1, 0x3506, 0x5, 0x0, 0x1, 0xfff, 0x6f8d, 0x80000001}}, 0xe4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x69}, @l2cap_cid_signaling={{0x65}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x4, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x4}}, @l2cap_disconn_req={{0x6, 0x9c, 0x4}, {0x80, 0xfffb}}, @l2cap_conn_rsp={{0x3, 0x7f, 0x8}, {0xf917, 0xff, 0x7, 0xfffd}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x400}}, @l2cap_conf_req={{0x4, 0xfc, 0x8}, {0x8, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x8001}]}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x5, 0x8}}, @l2cap_disconn_req={{0x6, 0x45, 0x4}, {0x841, 0xb7}}, @l2cap_conf_rsp={{0x5, 0x5, 0x1d}, {0x45dc, 0x9, 0x8000, [@l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x7ae5}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xfffd}, @l2cap_conf_ews={0x7, 0x2, 0x6}]}}]}}, 0x6e) 23:07:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) (async) 23:07:08 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x4}, {0x781, 0x101}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 23:07:08 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_info_rsp={{0xb, 0x1, 0x36}, {0x6, 0x400, "7c3831778fa8df8ff0ae608d38a4f0cbfc360ad617074240ba17f35265520bc5b5a527894fd7588751e7a381cac70ad0e113"}}, @l2cap_conf_req={{0x4, 0x8, 0x24}, {0x40, 0x7, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_mtu={0x1, 0x2, 0xfc00}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x26, 0x1, 0x14, 0xb4e, 0x5}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_info_rsp={{0xb, 0x1, 0x36}, {0x6, 0x400, "7c3831778fa8df8ff0ae608d38a4f0cbfc360ad617074240ba17f35265520bc5b5a527894fd7588751e7a381cac70ad0e113"}}, @l2cap_conf_req={{0x4, 0x8, 0x24}, {0x40, 0x7, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_mtu={0x1, 0x2, 0xfc00}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x26, 0x1, 0x14, 0xb4e, 0x5}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x6b) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) [ 357.988325][ T7803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.007454][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 358.025192][ T7803] batman_adv: batadv0: Removing interface: batadv_slave_0 23:07:08 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x4}, {0x781, 0x101}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x4}, {0x781, 0x101}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 23:07:08 executing program 1: syz_emit_vhci(0x0, 0x0) 23:07:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1006}, [@IFLA_MASTER={0x8}, @IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in=@local, 0x4e21, 0x6, 0x4e24, 0x2, 0xa, 0x90, 0x20, 0x67, r2}, {0x7ff, 0x1f, 0x2, 0x0, 0x5, 0x3, 0x8, 0x8}, {0x1000, 0x2000, 0x2, 0x8}, 0x401, 0x0, 0x0, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x3c}, 0xa, @in6=@private1, 0x3506, 0x5, 0x0, 0x1, 0xfff, 0x6f8d, 0x80000001}}, 0xe4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x69}, @l2cap_cid_signaling={{0x65}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x4, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x4}}, @l2cap_disconn_req={{0x6, 0x9c, 0x4}, {0x80, 0xfffb}}, @l2cap_conn_rsp={{0x3, 0x7f, 0x8}, {0xf917, 0xff, 0x7, 0xfffd}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x400}}, @l2cap_conf_req={{0x4, 0xfc, 0x8}, {0x8, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x8001}]}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x5, 0x8}}, @l2cap_disconn_req={{0x6, 0x45, 0x4}, {0x841, 0xb7}}, @l2cap_conf_rsp={{0x5, 0x5, 0x1d}, {0x45dc, 0x9, 0x8000, [@l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x7ae5}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xfffd}, @l2cap_conf_ews={0x7, 0x2, 0x6}]}}]}}, 0x6e) [ 358.131553][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 358.142682][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 358.378268][ T4982] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 358.757531][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.768478][ T4982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.778530][ T4982] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 358.787636][ T4982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.804558][ T4982] usb 4-1: config 0 descriptor?? [ 359.327316][ T4982] usbhid 4-1:0.0: can't add hid device: -71 [ 359.333393][ T4982] usbhid: probe of 4-1:0.0 failed with error -71 [ 359.348133][ T4982] usb 4-1: USB disconnect, device number 75 23:07:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x600, 0xfd, 0x5, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xff, 0xb4}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3e, 0x7, 0x40, 0x10}, 0x6d, &(0x7f0000000100)={0x5, 0xf, 0x6d, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x4, 0x4, 0x20, 0xa2}, @generic={0x57, 0x10, 0x2, "72f6c320e8ea6563afcdafd7ae92a859ec0bad37dc3c265ff6d4eb1f94c138fb13e5296b0706fad39dcbfd53cb0e1ac972fe24cfbd70ef59929b04cd25183047c657387494b0e4be0964b0cc52e5e57ad7b11e8a"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="17036241669416f367cbccb454906cdb11158f00"/33]}, {0x21, &(0x7f0000000600)=ANY=[@ANYBLOB="219bf7d522e7e3eec16f0d5fa3695809cfee7f4568ed435a1700db4a02020000494e7cbeb3a5e9a7a5f05aa6d6cfee34f1658c493dbcfa3ea5"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xe0, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x2, 0x1, 0x3, 0xf0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e662"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7f, 0x6, 0x7f}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@obex={0x5, 0x24, 0x15, 0x200}, @mdlm_detail={0x6b, 0x24, 0x13, 0xa0, "77dccf4ffaa93f0d648736a5ecf73876a96722f0dab436606515b41fca726449502851f73d23a8d13f4d7c8fcb7a01d8ddfcf9226f24492b50e425e58f02615ef5a8b5b74be5858f3d1ca66667bb9e7e9d7e99a350815f1fd5d17702304572e6c26c11867d17eb"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x78, 0x2c, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x1ff, 0x0, 0x8, 0x9}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x1f, 0x7, 0xff, 0x40, 0x1}, 0x47, &(0x7f0000000400)={0x5, 0xf, 0x47, 0x2, [@ptm_cap={0x3}, @generic={0x3f, 0x10, 0x1, "ce25870ce2dc0385a6acac58ff748d3708ff1c0f4dda2d7c352baff8f4cc6a1b4329630915740e55e883090fcefd7e7e3297a4519c00fa66e9358eb9"}]}, 0x2, [{0xba, &(0x7f0000000480)=@string={0xba, 0x3, "c4d5ca639488fea2bf7bb9fa84d7fd3adbdd25a766d427d8dd2ffc8e938a14ac4e7b64db24c387fd6774582215919f1daf95533f15cb390ec0a8aa2bd45ad6c9af77340af465383b2b58580f2e74178051b4b6c11514f9852ed34e4f37bc3c7c6d839d8ea19972f8e36afab3a1bde968ef074b46fa5ce1383f5c61f415d2d18de745ba704dfd7fd7d01542dacd303d71793a950cdb156dae2e342b2357e800242b5e4c3641252e990d0a2d23cf720c94b83a8b64a0064704"}}, {0x77, &(0x7f0000000540)=@string={0x77, 0x3, "90bbd1656a131521b6da7266fcffe0846427dd050cb9f840ebf165c09169b0f161d8a0f54b713bd7484d50c508013635a57686f8524674d7faf10a089769aba256d966d68ab4b613d7308aff56ab1da66ecb8e1b3fd463a3e52698d22985a29347ff4bccb83ddbe7ccb3bad712cbc1bb65b52fac22"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c221c00000033c09009c2d2070fc02de2"], 0x0}, 0x0) 23:07:09 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x4}, {0x781, 0x101}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x4}, {0x781, 0x101}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 23:07:09 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) (async) 23:07:09 executing program 1: syz_emit_vhci(0x0, 0x0) 23:07:09 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_info_rsp={{0xb, 0x1, 0x36}, {0x6, 0x400, "7c3831778fa8df8ff0ae608d38a4f0cbfc360ad617074240ba17f35265520bc5b5a527894fd7588751e7a381cac70ad0e113"}}, @l2cap_conf_req={{0x4, 0x8, 0x24}, {0x40, 0x7, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_mtu={0x1, 0x2, 0xfc00}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x26, 0x1, 0x14, 0xb4e, 0x5}}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x6b) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 23:07:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1006}, [@IFLA_MASTER={0x8}, @IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in=@local, 0x4e21, 0x6, 0x4e24, 0x2, 0xa, 0x90, 0x20, 0x67, r2}, {0x7ff, 0x1f, 0x2, 0x0, 0x5, 0x3, 0x8, 0x8}, {0x1000, 0x2000, 0x2, 0x8}, 0x401, 0x0, 0x0, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x3c}, 0xa, @in6=@private1, 0x3506, 0x5, 0x0, 0x1, 0xfff, 0x6f8d, 0x80000001}}, 0xe4) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x69}, @l2cap_cid_signaling={{0x65}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x4, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x4}}, @l2cap_disconn_req={{0x6, 0x9c, 0x4}, {0x80, 0xfffb}}, @l2cap_conn_rsp={{0x3, 0x7f, 0x8}, {0xf917, 0xff, 0x7, 0xfffd}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x400}}, @l2cap_conf_req={{0x4, 0xfc, 0x8}, {0x8, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x8001}]}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x5, 0x8}}, @l2cap_disconn_req={{0x6, 0x45, 0x4}, {0x841, 0xb7}}, @l2cap_conf_rsp={{0x5, 0x5, 0x1d}, {0x45dc, 0x9, 0x8000, [@l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x7ae5}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0xfffd}, @l2cap_conf_ews={0x7, 0x2, 0x6}]}}]}}, 0x6e) 23:07:10 executing program 5: bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0696059905000040c6000000"], 0x9) 23:07:10 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x400, 0x81, 0x6, 0x39f, 0x2}}}}, 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5a}, "951e14ece2ab6d904b07a32180974ce5dab224683290030e2e82efb69d5eb9fc9f20e0f1942d367d8e646a8a9981875a950af0e4c4871abadf72b9e5c9d2734efccc81b20785553d48b16a919e5fd006beb774f149a073a7521d"}, 0x5e) 23:07:10 executing program 1: syz_emit_vhci(0x0, 0x0) 23:07:10 executing program 4: syz_open_dev$ptys(0xc, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) [ 359.812939][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 359.826811][ T3653] Bluetooth: hci1: wrong event for mode 0 23:07:10 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x51}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:07:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, 0x0, 0xfff, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) [ 359.913985][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 359.986037][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 360.157239][ T3724] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 360.527400][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.538356][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.548412][ T3724] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 360.557765][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.567113][ T3724] usb 4-1: config 0 descriptor?? [ 361.107408][ T3724] usbhid 4-1:0.0: can't add hid device: -71 [ 361.113481][ T3724] usbhid: probe of 4-1:0.0 failed with error -71 [ 361.123853][ T3724] usb 4-1: USB disconnect, device number 76 23:07:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x400, 0x81, 0x6, 0x39f, 0x2}}}}, 0x17) (async, rerun: 32) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5a}, "951e14ece2ab6d904b07a32180974ce5dab224683290030e2e82efb69d5eb9fc9f20e0f1942d367d8e646a8a9981875a950af0e4c4871abadf72b9e5c9d2734efccc81b20785553d48b16a919e5fd006beb774f149a073a7521d"}, 0x5e) 23:07:11 executing program 5: bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0696059905000040c6000000"], 0x9) 23:07:11 executing program 4: syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:07:11 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x51}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:07:11 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYRESDEC=0x0], 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none}}}, 0xd) syz_emit_vhci(&(0x7f0000001100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x81, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0x9, 0x1000, 0x0, 0x9, 0xfff9}}}}, 0x17) open(&(0x7f0000001140)='./file0\x00', 0x101800, 0x0) 23:07:11 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x4800, 0x141101) r1 = dup(r0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0xfffffab3, 0xf3, &(0x7f0000000000)=0x9}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) 23:07:11 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x51}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) 23:07:11 executing program 5: bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0696059905000040c6000000"], 0x9) [ 361.575730][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 361.590289][ T3655] Bluetooth: hci1: wrong event for mode 0 23:07:11 executing program 4: syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) 23:07:11 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYRESDEC=0x0], 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000001100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x81, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0x9, 0x1000, 0x0, 0x9, 0xfff9}}}}, 0x17) open(&(0x7f0000001140)='./file0\x00', 0x101800, 0x0) 23:07:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x400, 0x81, 0x6, 0x39f, 0x2}}}}, 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5a}, "951e14ece2ab6d904b07a32180974ce5dab224683290030e2e82efb69d5eb9fc9f20e0f1942d367d8e646a8a9981875a950af0e4c4871abadf72b9e5c9d2734efccc81b20785553d48b16a919e5fd006beb774f149a073a7521d"}, 0x5e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x400, 0x81, 0x6, 0x39f, 0x2}}}}, 0x17) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5a}, "951e14ece2ab6d904b07a32180974ce5dab224683290030e2e82efb69d5eb9fc9f20e0f1942d367d8e646a8a9981875a950af0e4c4871abadf72b9e5c9d2734efccc81b20785553d48b16a919e5fd006beb774f149a073a7521d"}, 0x5e) (async) 23:07:11 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x3, 0x1, 0x8, "cb8af7"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb, 0x8, 0x7, "9bc14a", 0x8e}, {@any, 0x7f, 0x0, 0x0, "dd6398", 0x8}, {@any, 0x2, 0x3f, 0x40, "d100d0", 0x1}]}}}, 0x3c) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "b57dd4", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2c}, "1cf314274f4a771e253b3c76deb3cf880f049732a2bbd816108375c6f216fd5c6c73257a80b49523d638e8c2"}, 0x30) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f}}}, 0xa) 23:07:11 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f0000004e4fda9f42076c499a9d51d4014e97ef0a42fe9741bd6961f7e4795b24c484b627af24e85685e27adb647441365a810313a050bc742d085207b022f389195e8756052e988f95f45d7bba8f099408368c6dd30c6e4824525d831b3217e98699350cabb5c86a8e3a2626d7a869655e2b88d5c8d4e94a706d580378c2ca40d33a003d4cf3631faa17172ac8ea656b32f63a3362f403902a2b908716d823caf23656d4f4eba4480ad0f271e42502ec9f5da3d61993"], 0x7e) [ 361.701990][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:07:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYRESDEC=0x0], 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000001100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x81, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0x9, 0x1000, 0x0, 0x9, 0xfff9}}}}, 0x17) (async) open(&(0x7f0000001140)='./file0\x00', 0x101800, 0x0) 23:07:12 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES8=r1], 0x1) syz_io_uring_setup(0x1011, &(0x7f0000001100)={0x0, 0xc33e, 0x4, 0x3, 0x214}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000001180)) [ 361.755798][ T3655] Bluetooth: hci1: wrong event for mode 0 23:07:12 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x2102, 0x0) close(r1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000c000500170008000000000000000000c632f5117835c81676de841507a94c010c491ebdf1bb8f955b65d34a2a331f313e9b02cfc0bad0d69b06e432c87ef0f60000fc7f04000000b2fcbc9f1b8f3f778a6a1b0a8fcf80b64c43b021ae85726e3ebad0bd3d3b4091f566"], 0x15) 23:07:12 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f0000004e4fda9f42076c499a9d51d4014e97ef0a42fe9741bd6961f7e4795b24c484b627af24e85685e27adb647441365a810313a050bc742d085207b022f389195e8756052e988f95f45d7bba8f099408368c6dd30c6e4824525d831b3217e98699350cabb5c86a8e3a2626d7a869655e2b88d5c8d4e94a706d580378c2ca40d33a003d4cf3631faa17172ac8ea656b32f63a3362f403902a2b908716d823caf23656d4f4eba4480ad0f271e42502ec9f5da3d61993"], 0x7e) [ 361.824292][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 361.977893][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 362.017366][ T7] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 362.377454][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.388409][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.398248][ T7] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 362.407389][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.417453][ T7] usb 4-1: config 0 descriptor?? [ 362.957347][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 362.963403][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 362.972265][ T7] usb 4-1: USB disconnect, device number 77 23:07:13 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x4800, 0x141101) r1 = dup(r0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0xfffffab3, 0xf3, &(0x7f0000000000)=0x9}) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) 23:07:13 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="e40729a998c0107be13587d0df827ea62c61259f542b1509eb1208ecb9aa4e3a2547508ef8c57c0072653d4c23f9cc5947ba1f2fbed5ffe71bb8dc72658f6d65b416d40486048406c89e2daaa0ffffd0260d2cc15d0ba98f4b47cb936610adb0872e20a0155c7be657e8c466a8c59813a156faa069496e15700473e8452a0ac0ad987875cf658c1a9d683b343046bbd87e76f853fe7f83cd96e228f7f6dc417f8c2006c0399bd1bd1332f62f692b15db182250f48e4844f98bc850114f2d854eef837d0bd301c139d6ba02478097d126f00e46f8bae90f6754e22860f1af3aa193031bd93febb46303d667f4154de222b7cd81efc1e8296e5239ab084ead123e5c4fba04c209f14582ff4ca1c281e8091a583f646d4cfaeb93545d72f1fea59e784f38a4dc12f3fd0e4ad058bc5eb662e328060775a6d636ea346d51560e713088fc34782800ab122cb88b1f0142a93ecf6f01282a5132ee99f93b19bbf5b75d7ae36bfd605fd5859e400477401fff288dfcb780b9bc95762fb7f9d28136a00ae891a983e86723d25a69a3897e8f95293686d31f02f76297dbe5a24843beee1109faac09d2dd31c59469f400c89b2e0bf0535b9943bac91f3bbe22ad998f1dc86dfc13cd9c33030e99e22bd260801d0ec2dbff034800603eb48124d240e7e178fc6a8e9a20a3b8b1cbcfc0ae99c74811a8e64bac41fb9beb93a62e611cf113b57eadeca9086c840402278736b5d45f8093c72117ac7e5a41b7921ae7e70c80eeac7d11341f8e5b4fcc09d1db5458d8d234786136a9ea2b27697e0f1f501c9dfd623929f81489dbe68c764fef3ba7391fbd82a38a21aad37ed30100b3a7c0018d46f91999e93bcd132320c91b9c3a9be4bf9f83bf297668c097a62cbe218f592470de8aaf4536bd08db6c031dcc4e90e8c508c06858e84e3e8b37db0819ecf4493f0b8a592386fe2a36088f4348438e151e35bc09147b6c7c0c5ffc5b11754bb63911f371f6bfa12108ff25cb7232a3be1f679d7d160b4874130dcb71fd6a40cba73b50cf68d41afda6efb55519fcc060eef5bd8c1aa4714e93f4c6b68adb46d431afa6844712b9ae1d89d6978d31cc2cd7cfa27bf24c6610cc5339d6633b224f0311d2f5186db730fbbada9b7fb83371fcf276cc1e2ff6af31f469c38a8ffa6cd55052a0225e4d2efed172246c323f55cae328eae03df72e1f387f9d9d4de6966f7786669312ef557d1fa2c33490c91ce6865e86e6e42660678193ba1a41d91433f7435fd21c73770a68ffe91cd8f23d4d76e600551c6da83c49bd5a2b3d7f19e5f980e96804fb7bf71757dd4bc22ac4b94133b5ab5674972471224b39ffa108f889331d68ea000abd11d63d7b109ed9b2f191ad2e8b35d0d801d1a602123c8b50c9ea85e53adda2ddb7964900939477517b5b53c7cb6bf5e24938f913070dc95a9afe90694c6905b888f48f52b9e637278d48ea3f1132f46d3f367027abf93929eb9d3faef55bfff2f8269a56814ae52a03141bf579ab6bb2208d1b8260302fdb8a8d9670d6e0c17ff1a3038bd3a0a35220fc939bbd49e0d52d338e1680e8be02b78d31576542fa56a76e3572fdce795d908f32e4ee53a7e8980789d0b57e769af8ba7e154133f369395ce813f2140e8c942ded49fd44ddf51a874f06bad55576776ffa893102f91f8b38f801655c3c9b8884a1933b82ce7cf8cafe9d4d5071bdd2db1df0786998b8ed8cbe85d4e360a87b495c93d1aa98b1e9cff8cdd5350eb83da0d7e3eb94113cdc1f9ef592fa02941031436d337869dab9bfaf35f5dcd482dbd57edac5f5a1fe728d803da21c2cff17a3130cd6c87664b4e406059e7020481afe3eaae0323af3930ba9a2ca6a19a1c669b34af6696f0cbd692305974cf2217bd27def1076525b6775a61843c01f259817a73be12473b646a82eded1a7d252f9a544a6556b666aacc4c0c0e2adc08ea5337f7dbd750e4d907dd271954cd18a3085a8a09c1f4f61c333864204277b6910c4d8ad0bf165e8d2fde7770d5ee95edf354f4c972b43ae683ef482450fa0399f625038816022329e29d546e8fbcbb421ef18b4829100ed1ebcff8e676937f71c58c10116d9d1194ca7a6ff5ee81757ecdb1b790748b501b0d3ecd1c01283849e3df6f45193d05afa364adb74acdffb14f9994868af708031960b725fb99615b69080d44f5d1a1320bdc67fdeab14b632340cfd0ce186873bf25f16a3772311dac82ccadfb00b3cc53a0ebbdf56bae28c4c4eed28994726a3066ab6990e9d6d7ccf99485b06589c936189ad250c1bba242980f4a5e6ddfbaad6fae7c408ce5f9be4e556d94ad9a6a11cec6bba1cd6ab2be4e175d8bd6707732ad454bb7a77d49f4b7b214c08d170eedeb6e672340205f6a734ae8dcd71568bd588ba17b1b10a5b73d10d95780170e1f654756b041258c6d0b9b57a7bb6c9a0d39bd21462595c4354d30608297a98f5a88cb50ddd032fb19a6d03350a420b7534bb99136c75ab85d92518bde43ecf8800d9a6a71588faf499c728f64ab25b93f338af38b047687fb68cd5cb362b684b2f3458c3d17768f1d381f93ee71507a0de439b623e5390ff8fc8dea8a5926f5634bf344bb23060b2b2ab185ff1ede85b642fa1b6e1eacb14cfb98266917301e5533b60936e917942fba95f3efd04ca2a139e2bc9520c325d373557bc1b4b91dfb1dc9857e551e95eda8ec588143e6cb14bbfb7d6d3bd9d14df2ed8df47ca2570972f6ba0ae9bf2a71c3b8b979f6339e594f6f9a792599b1d9ee216d30183b7ffb9b35a62ea03abb0a01a2679fbe3ae34a2b637222b92b78b464d772b89c946477344301fe6ed89e2ebf57025588a3dcb7bea91dc884613f4894879f59af215095dabc8f8fdcb55e0d425bd440193a60e7d831fb5474e285c44d14889197c5184683920ab04656958976b0f66cb244a244bbe9cc2fac893c1b2d498d2100061af47dea2847995406b1b08d0265ea6434343057f47cf37ce9ea9a6fcac2f4be71ea640a34d96dcfec4ad172231d612a498f1c59b192a83470ac3d0f8bc58102588f1937cd7de083f676a35423842a287843fc77f107af72cb18ba56e76945103a6bf079e0d90b649e963cd5771276d6d2bdb4ec97a3e1b18c241649792ef3bf79a6e421c06c24c7dc49e9287fdb0fd2e8ef9a17862304a9e8f95f6f37052a185ca210e7154f9d6bd9b6dbc263493903d711bc700ab96bb8cd55d0c4178f7c8791c82625dc5de8e3dbb2938d64766f17eeb9217c37aa90826c8b1e2bb354671759c63f2ee23c7a015f815fa4cc43fe21d25203b4e830460a8be2c9e7338e16419f2b100cc7ac52a792e2fb609a2151c76956ae0f20ffa251b199034c6b5642e2f441ce9ac95cfc92b6765d29d475e8adeda5756785494fe5cb55182e2585c3f5dd4cd4a896c9192751b8bbc0ee0d25fb004cc8cf6bb2b6f07ce3048dde7cbb2f9bb4373133240dbaade5da3045f647cac68d560bd7ff85bca19a3e533e8e42853c0673ce2370bb85e136ba1a29496ba660b399a0c6e12f5aab5f9f54fa24842dcdf6a92f95eb41aa8781e5b7f08aebe53d089d8e4441196eb9cca459c6efeb801d5a08767ae478963a911e9a3e0dc30ae0d127b09ef1f79abdb9d3f0cd7ca1ef0389eec79ad7d55b8c7e3d85bb619f4a617539b141ab57f2b5c468c25d58e862a906a505b34708e4393b39cc4ccc31e3095dc42dd54c1d91e0376a8aba4942a26d34133d8f0db4f06f03f4d78c7480a3cacc83c9ff3e3f8257039ae5bb6c4b00f471478017db9fe57f42061e9ae7da664a893690c8334245428f0238f1fe0340ff7e26e116f516bda23d7016f3b8e0ef53cc0c3bbe3690f7953855a4f33ab4b9b53a879ae545bf7207831c5160afb89c1458603550cbb53c222e3645efaa4bc43579eb572ea76525d15ea3b2d9245cfc61ca7eaa37356e0cb331e8cd21359b26513d728e674fb5b804e6921b6c3dc6ce4dd246901a6ca5f4ba40da87b931cd4cb1d502f82cb3c9d3d496e253cbdd4f9acead9174faaf71ce54ebdd648ad589ebfc725c4ef0df0731a99186dc1b865cbf845576afcf1effc63a0a0f414bb953c3ab2f73908bce3fe94483c4def11951315b8eb04ad82f80117b8d2fa83bf39bea7a09fb7606794f9f13b6a85729b99e2d52f8362fb06de61bc83929499ca13979815a95fe3d1aeae5383def9c5a53c57ca79d8d57e0b956c856b579eb6d46abe5312256c588bac9477de2522a1aebe8a26f2a921cd4352b8ac72fb141e7349585d8e8f0f6fe69f306e4edef244305a55c00fe495709d597e218e5dc823f8453e8b0a90bb1ce44f00bf29d722ec368f051a3a7495a7ded0c57523339d0a9bec302d4b1907a10d5e2972b746b03c124e82df04b75c9d94c1e652373fbdc885ffb1d9167dd27604c5a09503a93ddff76cac6f499f0a0901a4dc10e5deb5dbc07167a198ccbf19437b52a5748944d5f0eb434a4d2e002927368fda32874824ba2f854bb4a565b12bd8b1c9fb902db19db3dfd6fb3bb3d116e6c05537c8905b0021c3723f80de976b9421f56f1f56605de9432c755886b4a4abccb2ca2b8a9e5acf622b0badb0c5595a9b5cc5b9d066ffdfa66b1b4fc5603c83d204b18d81d8665eced23a6bab9e8641a9acccd3e4c29b19ad01f0f79b93a40bf3585f716e122565694ca27ef504c10934a1f88fcd04b2073b7b4bce4b9e85f3c8534483265597812a59c2b322e903d5f03da6e84aa80524ad75b44e6e135c61214b551ba4abe1ce91da7eba2a4614e71efc3c726c500d55c6cd80002046cce590d4b3907c5038aad1bf4771867e045c242a7a079578b82c5544c502ce66e4a2c6f7b31c05d7f2c4b7609a7cb0cc65c474d94858c405f9b3dc7024ccf510a947bd0087d1d9da0a3c73a7fcc02bc1c28901596ea58949c1cc1908caaa7dcf8768f8c295643312f69a24f623af614397a34015ee171a9b336ee51b170f5b33be5b72532ec03d8fa0bd86470ad2af2cf436740e6f36ff1c724833fe559d66b27ce7fe2d3f606dafd532b2c3ab50db6d41535e76375937134e7d2fe32477fd009a2d8f9ff99745a16e705a4da0b727d64b1a6ba7796724d51422a81d03e381653cbb826238ba06bdf15e823c04c3be55b38cd06f2a4860d506368ea0be132ac7a09308ac59049564954ce0d05e3c1d0495cca4b9acd57db2e03ec40c33dc18644ecad2475e18123065e85aa05dcca3dbc50d157e3d6459172575a4bb18f71a458e4c17ab1806204a05ab8cf2edf743f9d54adcc1aac4b1d046b6abbc4706c92c659e9ae737238049ba286db2d58ac3c04bda0e6d4bd93a24fe39e5712424d88979267d729d363bd4cbb9b99ac17dc1860c6f246de45b72da437f948283bea4c513b48cacd6ff92003e35bb737e3335d2479edc6e4c96c1cb99195e281c32047f190e0528a2c1f792e3b1a83a90d53d565b368a5459c9fe458014db769d661764591d1f1c34fa3f8b33e2f4e388af8207a7e6674f361d7da1d79f6073339f576361a6e52fe1985a863a7082311fb318ecd1d535003b2709476cd0c72c9ea9daa2f75e20e93dd32b15340a9787c056c51c3a3f08792fa8c01855125d0eefcce0ff3ce6586b9ae2103ae6b64f2375423d2f2cac48541d84572ea0cb790df30d3e0fde661f8f512614e97a1876f22ecd85ce898ac915eecd9c39760f6c32b5a3f0a76311d2c28a51b12ce9b59a80eed4f13e4eed00c6ca613c3588a729de67b68d6bcdc970ab3fbd367c16b6279042ae7f664f140d", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES8=r1], 0x1) (async) syz_io_uring_setup(0x1011, &(0x7f0000001100)={0x0, 0xc33e, 0x4, 0x3, 0x214}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000001180)) 23:07:13 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x3, 0x1, 0x8, "cb8af7"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb, 0x8, 0x7, "9bc14a", 0x8e}, {@any, 0x7f, 0x0, 0x0, "dd6398", 0x8}, {@any, 0x2, 0x3f, 0x40, "d100d0", 0x1}]}}}, 0x3c) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "b57dd4", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2c}, "1cf314274f4a771e253b3c76deb3cf880f049732a2bbd816108375c6f216fd5c6c73257a80b49523d638e8c2"}, 0x30) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f}}}, 0xa) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x3, 0x1, 0x8, "cb8af7"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb, 0x8, 0x7, "9bc14a", 0x8e}, {@any, 0x7f, 0x0, 0x0, "dd6398", 0x8}, {@any, 0x2, 0x3f, 0x40, "d100d0", 0x1}]}}}, 0x3c) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "b57dd4", 0x2}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2c}, "1cf314274f4a771e253b3c76deb3cf880f049732a2bbd816108375c6f216fd5c6c73257a80b49523d638e8c2"}, 0x30) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f}}}, 0xa) (async) 23:07:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x2102, 0x0) close(r1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000c000500170008000000000000000000c632f5117835c81676de841507a94c010c491ebdf1bb8f955b65d34a2a331f313e9b02cfc0bad0d69b06e432c87ef0f60000fc7f04000000b2fcbc9f1b8f3f778a6a1b0a8fcf80b64c43b021ae85726e3ebad0bd3d3b4091f566"], 0x15) 23:07:13 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043406000000000080"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 23:07:13 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf9dc000000000000000000000000bef172000000aaaaaaaaaa000000000f110f0000004e4fda9f42076c499a9d51d4014e97ef0a42fe9741bd6961f7e4795b24c484b627af24e85685e27adb647441365a810313a050bc742d085207b022f389195e8756052e988f95f45d7bba8f099408368c6dd30c6e4824525d831b3217e98699350cabb5c86a8e3a2626d7a869655e2b88d5c8d4e94a706d580378c2ca40d33a003d4cf3631faa17172ac8ea656b32f63a3362f403902a2b908716d823caf23656d4f4eba4480ad0f271e42502ec9f5da3d61993"], 0x7e) 23:07:13 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043406000000000080"], 0x9) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) (rerun: 64) 23:07:13 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf929c73d11000000000000000000bef172000000aaaaaaaab5000000000f110f000000"], 0x7e) [ 363.412642][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:07:13 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x3, 0x1, 0x8, "cb8af7"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfb, 0x8, 0x7, "9bc14a", 0x8e}, {@any, 0x7f, 0x0, 0x0, "dd6398", 0x8}, {@any, 0x2, 0x3f, 0x40, "d100d0", 0x1}]}}}, 0x3c) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "b57dd4", 0x2}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2c}, "1cf314274f4a771e253b3c76deb3cf880f049732a2bbd816108375c6f216fd5c6c73257a80b49523d638e8c2"}, 0x30) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f}}}, 0xa) 23:07:13 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES8=r1], 0x1) syz_io_uring_setup(0x1011, &(0x7f0000001100)={0x0, 0xc33e, 0x4, 0x3, 0x214}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000001180)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="e40729a998c0107be13587d0df827ea62c61259f542b1509eb1208ecb9aa4e3a2547508ef8c57c0072653d4c23f9cc5947ba1f2fbed5ffe71bb8dc72658f6d65b416d40486048406c89e2daaa0ffffd0260d2cc15d0ba98f4b47cb936610adb0872e20a0155c7be657e8c466a8c59813a156faa069496e15700473e8452a0ac0ad987875cf658c1a9d683b343046bbd87e76f853fe7f83cd96e228f7f6dc417f8c2006c0399bd1bd1332f62f692b15db182250f48e4844f98bc850114f2d854eef837d0bd301c139d6ba02478097d126f00e46f8bae90f6754e22860f1af3aa193031bd93febb46303d667f4154de222b7cd81efc1e8296e5239ab084ead123e5c4fba04c209f14582ff4ca1c281e8091a583f646d4cfaeb93545d72f1fea59e784f38a4dc12f3fd0e4ad058bc5eb662e328060775a6d636ea346d51560e713088fc34782800ab122cb88b1f0142a93ecf6f01282a5132ee99f93b19bbf5b75d7ae36bfd605fd5859e400477401fff288dfcb780b9bc95762fb7f9d28136a00ae891a983e86723d25a69a3897e8f95293686d31f02f76297dbe5a24843beee1109faac09d2dd31c59469f400c89b2e0bf0535b9943bac91f3bbe22ad998f1dc86dfc13cd9c33030e99e22bd260801d0ec2dbff034800603eb48124d240e7e178fc6a8e9a20a3b8b1cbcfc0ae99c74811a8e64bac41fb9beb93a62e611cf113b57eadeca9086c840402278736b5d45f8093c72117ac7e5a41b7921ae7e70c80eeac7d11341f8e5b4fcc09d1db5458d8d234786136a9ea2b27697e0f1f501c9dfd623929f81489dbe68c764fef3ba7391fbd82a38a21aad37ed30100b3a7c0018d46f91999e93bcd132320c91b9c3a9be4bf9f83bf297668c097a62cbe218f592470de8aaf4536bd08db6c031dcc4e90e8c508c06858e84e3e8b37db0819ecf4493f0b8a592386fe2a36088f4348438e151e35bc09147b6c7c0c5ffc5b11754bb63911f371f6bfa12108ff25cb7232a3be1f679d7d160b4874130dcb71fd6a40cba73b50cf68d41afda6efb55519fcc060eef5bd8c1aa4714e93f4c6b68adb46d431afa6844712b9ae1d89d6978d31cc2cd7cfa27bf24c6610cc5339d6633b224f0311d2f5186db730fbbada9b7fb83371fcf276cc1e2ff6af31f469c38a8ffa6cd55052a0225e4d2efed172246c323f55cae328eae03df72e1f387f9d9d4de6966f7786669312ef557d1fa2c33490c91ce6865e86e6e42660678193ba1a41d91433f7435fd21c73770a68ffe91cd8f23d4d76e600551c6da83c49bd5a2b3d7f19e5f980e96804fb7bf71757dd4bc22ac4b94133b5ab5674972471224b39ffa108f889331d68ea000abd11d63d7b109ed9b2f191ad2e8b35d0d801d1a602123c8b50c9ea85e53adda2ddb7964900939477517b5b53c7cb6bf5e24938f913070dc95a9afe90694c6905b888f48f52b9e637278d48ea3f1132f46d3f367027abf93929eb9d3faef55bfff2f8269a56814ae52a03141bf579ab6bb2208d1b8260302fdb8a8d9670d6e0c17ff1a3038bd3a0a35220fc939bbd49e0d52d338e1680e8be02b78d31576542fa56a76e3572fdce795d908f32e4ee53a7e8980789d0b57e769af8ba7e154133f369395ce813f2140e8c942ded49fd44ddf51a874f06bad55576776ffa893102f91f8b38f801655c3c9b8884a1933b82ce7cf8cafe9d4d5071bdd2db1df0786998b8ed8cbe85d4e360a87b495c93d1aa98b1e9cff8cdd5350eb83da0d7e3eb94113cdc1f9ef592fa02941031436d337869dab9bfaf35f5dcd482dbd57edac5f5a1fe728d803da21c2cff17a3130cd6c87664b4e406059e7020481afe3eaae0323af3930ba9a2ca6a19a1c669b34af6696f0cbd692305974cf2217bd27def1076525b6775a61843c01f259817a73be12473b646a82eded1a7d252f9a544a6556b666aacc4c0c0e2adc08ea5337f7dbd750e4d907dd271954cd18a3085a8a09c1f4f61c333864204277b6910c4d8ad0bf165e8d2fde7770d5ee95edf354f4c972b43ae683ef482450fa0399f625038816022329e29d546e8fbcbb421ef18b4829100ed1ebcff8e676937f71c58c10116d9d1194ca7a6ff5ee81757ecdb1b790748b501b0d3ecd1c01283849e3df6f45193d05afa364adb74acdffb14f9994868af708031960b725fb99615b69080d44f5d1a1320bdc67fdeab14b632340cfd0ce186873bf25f16a3772311dac82ccadfb00b3cc53a0ebbdf56bae28c4c4eed28994726a3066ab6990e9d6d7ccf99485b06589c936189ad250c1bba242980f4a5e6ddfbaad6fae7c408ce5f9be4e556d94ad9a6a11cec6bba1cd6ab2be4e175d8bd6707732ad454bb7a77d49f4b7b214c08d170eedeb6e672340205f6a734ae8dcd71568bd588ba17b1b10a5b73d10d95780170e1f654756b041258c6d0b9b57a7bb6c9a0d39bd21462595c4354d30608297a98f5a88cb50ddd032fb19a6d03350a420b7534bb99136c75ab85d92518bde43ecf8800d9a6a71588faf499c728f64ab25b93f338af38b047687fb68cd5cb362b684b2f3458c3d17768f1d381f93ee71507a0de439b623e5390ff8fc8dea8a5926f5634bf344bb23060b2b2ab185ff1ede85b642fa1b6e1eacb14cfb98266917301e5533b60936e917942fba95f3efd04ca2a139e2bc9520c325d373557bc1b4b91dfb1dc9857e551e95eda8ec588143e6cb14bbfb7d6d3bd9d14df2ed8df47ca2570972f6ba0ae9bf2a71c3b8b979f6339e594f6f9a792599b1d9ee216d30183b7ffb9b35a62ea03abb0a01a2679fbe3ae34a2b637222b92b78b464d772b89c946477344301fe6ed89e2ebf57025588a3dcb7bea91dc884613f4894879f59af215095dabc8f8fdcb55e0d425bd440193a60e7d831fb5474e285c44d14889197c5184683920ab04656958976b0f66cb244a244bbe9cc2fac893c1b2d498d2100061af47dea2847995406b1b08d0265ea6434343057f47cf37ce9ea9a6fcac2f4be71ea640a34d96dcfec4ad172231d612a498f1c59b192a83470ac3d0f8bc58102588f1937cd7de083f676a35423842a287843fc77f107af72cb18ba56e76945103a6bf079e0d90b649e963cd5771276d6d2bdb4ec97a3e1b18c241649792ef3bf79a6e421c06c24c7dc49e9287fdb0fd2e8ef9a17862304a9e8f95f6f37052a185ca210e7154f9d6bd9b6dbc263493903d711bc700ab96bb8cd55d0c4178f7c8791c82625dc5de8e3dbb2938d64766f17eeb9217c37aa90826c8b1e2bb354671759c63f2ee23c7a015f815fa4cc43fe21d25203b4e830460a8be2c9e7338e16419f2b100cc7ac52a792e2fb609a2151c76956ae0f20ffa251b199034c6b5642e2f441ce9ac95cfc92b6765d29d475e8adeda5756785494fe5cb55182e2585c3f5dd4cd4a896c9192751b8bbc0ee0d25fb004cc8cf6bb2b6f07ce3048dde7cbb2f9bb4373133240dbaade5da3045f647cac68d560bd7ff85bca19a3e533e8e42853c0673ce2370bb85e136ba1a29496ba660b399a0c6e12f5aab5f9f54fa24842dcdf6a92f95eb41aa8781e5b7f08aebe53d089d8e4441196eb9cca459c6efeb801d5a08767ae478963a911e9a3e0dc30ae0d127b09ef1f79abdb9d3f0cd7ca1ef0389eec79ad7d55b8c7e3d85bb619f4a617539b141ab57f2b5c468c25d58e862a906a505b34708e4393b39cc4ccc31e3095dc42dd54c1d91e0376a8aba4942a26d34133d8f0db4f06f03f4d78c7480a3cacc83c9ff3e3f8257039ae5bb6c4b00f471478017db9fe57f42061e9ae7da664a893690c8334245428f0238f1fe0340ff7e26e116f516bda23d7016f3b8e0ef53cc0c3bbe3690f7953855a4f33ab4b9b53a879ae545bf7207831c5160afb89c1458603550cbb53c222e3645efaa4bc43579eb572ea76525d15ea3b2d9245cfc61ca7eaa37356e0cb331e8cd21359b26513d728e674fb5b804e6921b6c3dc6ce4dd246901a6ca5f4ba40da87b931cd4cb1d502f82cb3c9d3d496e253cbdd4f9acead9174faaf71ce54ebdd648ad589ebfc725c4ef0df0731a99186dc1b865cbf845576afcf1effc63a0a0f414bb953c3ab2f73908bce3fe94483c4def11951315b8eb04ad82f80117b8d2fa83bf39bea7a09fb7606794f9f13b6a85729b99e2d52f8362fb06de61bc83929499ca13979815a95fe3d1aeae5383def9c5a53c57ca79d8d57e0b956c856b579eb6d46abe5312256c588bac9477de2522a1aebe8a26f2a921cd4352b8ac72fb141e7349585d8e8f0f6fe69f306e4edef244305a55c00fe495709d597e218e5dc823f8453e8b0a90bb1ce44f00bf29d722ec368f051a3a7495a7ded0c57523339d0a9bec302d4b1907a10d5e2972b746b03c124e82df04b75c9d94c1e652373fbdc885ffb1d9167dd27604c5a09503a93ddff76cac6f499f0a0901a4dc10e5deb5dbc07167a198ccbf19437b52a5748944d5f0eb434a4d2e002927368fda32874824ba2f854bb4a565b12bd8b1c9fb902db19db3dfd6fb3bb3d116e6c05537c8905b0021c3723f80de976b9421f56f1f56605de9432c755886b4a4abccb2ca2b8a9e5acf622b0badb0c5595a9b5cc5b9d066ffdfa66b1b4fc5603c83d204b18d81d8665eced23a6bab9e8641a9acccd3e4c29b19ad01f0f79b93a40bf3585f716e122565694ca27ef504c10934a1f88fcd04b2073b7b4bce4b9e85f3c8534483265597812a59c2b322e903d5f03da6e84aa80524ad75b44e6e135c61214b551ba4abe1ce91da7eba2a4614e71efc3c726c500d55c6cd80002046cce590d4b3907c5038aad1bf4771867e045c242a7a079578b82c5544c502ce66e4a2c6f7b31c05d7f2c4b7609a7cb0cc65c474d94858c405f9b3dc7024ccf510a947bd0087d1d9da0a3c73a7fcc02bc1c28901596ea58949c1cc1908caaa7dcf8768f8c295643312f69a24f623af614397a34015ee171a9b336ee51b170f5b33be5b72532ec03d8fa0bd86470ad2af2cf436740e6f36ff1c724833fe559d66b27ce7fe2d3f606dafd532b2c3ab50db6d41535e76375937134e7d2fe32477fd009a2d8f9ff99745a16e705a4da0b727d64b1a6ba7796724d51422a81d03e381653cbb826238ba06bdf15e823c04c3be55b38cd06f2a4860d506368ea0be132ac7a09308ac59049564954ce0d05e3c1d0495cca4b9acd57db2e03ec40c33dc18644ecad2475e18123065e85aa05dcca3dbc50d157e3d6459172575a4bb18f71a458e4c17ab1806204a05ab8cf2edf743f9d54adcc1aac4b1d046b6abbc4706c92c659e9ae737238049ba286db2d58ac3c04bda0e6d4bd93a24fe39e5712424d88979267d729d363bd4cbb9b99ac17dc1860c6f246de45b72da437f948283bea4c513b48cacd6ff92003e35bb737e3335d2479edc6e4c96c1cb99195e281c32047f190e0528a2c1f792e3b1a83a90d53d565b368a5459c9fe458014db769d661764591d1f1c34fa3f8b33e2f4e388af8207a7e6674f361d7da1d79f6073339f576361a6e52fe1985a863a7082311fb318ecd1d535003b2709476cd0c72c9ea9daa2f75e20e93dd32b15340a9787c056c51c3a3f08792fa8c01855125d0eefcce0ff3ce6586b9ae2103ae6b64f2375423d2f2cac48541d84572ea0cb790df30d3e0fde661f8f512614e97a1876f22ecd85ce898ac915eecd9c39760f6c32b5a3f0a76311d2c28a51b12ce9b59a80eed4f13e4eed00c6ca613c3588a729de67b68d6bcdc970ab3fbd367c16b6279042ae7f664f140d", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES8=r1], 0x1) (async) syz_io_uring_setup(0x1011, &(0x7f0000001100)={0x0, 0xc33e, 0x4, 0x3, 0x214}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000001180)) (async) 23:07:13 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043406000000000080"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043406000000000080"], 0x9) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) (async) 23:07:13 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008aec1, 0xf6f37000) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x2102, 0x0) close(r1) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c98010000c000500170008000000000000000000c632f5117835c81676de841507a94c010c491ebdf1bb8f955b65d34a2a331f313e9b02cfc0bad0d69b06e432c87ef0f60000fc7f04000000b2fcbc9f1b8f3f778a6a1b0a8fcf80b64c43b021ae85726e3ebad0bd3d3b4091f566"], 0x15) (rerun: 64) [ 363.428100][ T3655] Bluetooth: hci4: unexpected event 0x3c length: 12 > 7 [ 363.569110][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 363.629556][ T3655] Bluetooth: hci4: unexpected event 0x3c length: 12 > 7 [ 363.787648][ T3724] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 363.867432][ T143] Bluetooth: hci4: command 0x0409 tx timeout [ 364.177321][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.188340][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.198322][ T3724] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 364.207584][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.218554][ T3724] usb 4-1: config 0 descriptor?? [ 364.757381][ T3724] usbhid 4-1:0.0: can't add hid device: -71 [ 364.763417][ T3724] usbhid: probe of 4-1:0.0 failed with error -71 [ 364.776808][ T3724] usb 4-1: USB disconnect, device number 78 23:07:15 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x4800, 0x141101) r1 = dup(r0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0xfffffab3, 0xf3, &(0x7f0000000000)=0x9}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x4800, 0x141101) (async) dup(r0) (async) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0xfffffab3, 0xf3, &(0x7f0000000000)=0x9}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) (async) 23:07:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 23:07:15 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf929c73d11000000000000000000bef172000000aaaaaaaab5000000000f110f000000"], 0x7e) 23:07:15 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7f}, "df473a7093f625fe8db81f0115e83e1a4372c0f56b58dbb7cea09ed58f8ec83d66f019da225bc9c2aecbe4bb75d67a253c0cb60e21aeae4a9876fc7235fa7977b84c1e0200b6f66bf84f6bc5c7c945ff225812386c7dc2dd9a015f2c31927c110b1f1829c5b48c2936ea05ce68c156bfd0a4b7b74a4ee3fa53d5288c0c7685"}, 0x83) 23:07:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 23:07:15 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x80, 0xc8, {0x3f, 0x8, 0x5, 0x28, 0x9}}}}, 0x15) 23:07:15 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x80, 0xc8, {0x3f, 0x8, 0x5, 0x28, 0x9}}}}, 0x15) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x80, 0xc8, {0x3f, 0x8, 0x5, 0x28, 0x9}}}}, 0x15) (async) 23:07:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 23:07:15 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04222e03aaaaaaaaaa00000700caf929c73d11000000000000000000bef172000000aaaaaaaab5000000000f110f000000"], 0x7e) 23:07:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 365.243681][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 365.261927][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:07:15 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7f}, "df473a7093f625fe8db81f0115e83e1a4372c0f56b58dbb7cea09ed58f8ec83d66f019da225bc9c2aecbe4bb75d67a253c0cb60e21aeae4a9876fc7235fa7977b84c1e0200b6f66bf84f6bc5c7c945ff225812386c7dc2dd9a015f2c31927c110b1f1829c5b48c2936ea05ce68c156bfd0a4b7b74a4ee3fa53d5288c0c7685"}, 0x83) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7f}, "df473a7093f625fe8db81f0115e83e1a4372c0f56b58dbb7cea09ed58f8ec83d66f019da225bc9c2aecbe4bb75d67a253c0cb60e21aeae4a9876fc7235fa7977b84c1e0200b6f66bf84f6bc5c7c945ff225812386c7dc2dd9a015f2c31927c110b1f1829c5b48c2936ea05ce68c156bfd0a4b7b74a4ee3fa53d5288c0c7685"}, 0x83) (async) 23:07:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) [ 365.351981][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 365.414174][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 365.421838][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 365.438401][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 365.677255][ T15] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 365.947420][ T3166] Bluetooth: hci4: command 0x0409 tx timeout [ 366.047368][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.058347][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.068420][ T15] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 366.077821][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.087632][ T15] usb 4-1: config 0 descriptor?? 23:07:16 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04220c03aaaaaaaaaa00000700caf9dc00000000000082dee7000000000000bef172000000aaaaaaaaaa000000000f110f000000"], 0x7e) 23:07:16 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7f}, "df473a7093f625fe8db81f0115e83e1a4372c0f56b58dbb7cea09ed58f8ec83d66f019da225bc9c2aecbe4bb75d67a253c0cb60e21aeae4a9876fc7235fa7977b84c1e0200b6f66bf84f6bc5c7c945ff225812386c7dc2dd9a015f2c31927c110b1f1829c5b48c2936ea05ce68c156bfd0a4b7b74a4ee3fa53d5288c0c7685"}, 0x83) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7f}, "df473a7093f625fe8db81f0115e83e1a4372c0f56b58dbb7cea09ed58f8ec83d66f019da225bc9c2aecbe4bb75d67a253c0cb60e21aeae4a9876fc7235fa7977b84c1e0200b6f66bf84f6bc5c7c945ff225812386c7dc2dd9a015f2c31927c110b1f1829c5b48c2936ea05ce68c156bfd0a4b7b74a4ee3fa53d5288c0c7685"}, 0x83) (async) 23:07:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0xb, "80400400"}, @global=@item_012={0x1, 0x1, 0x8, "fd"}]}}, 0x0}, 0x0) 23:07:16 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 23:07:16 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x80, 0xc8, {0x3f, 0x8, 0x5, 0x28, 0x9}}}}, 0x15) 23:07:16 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 23:07:16 executing program 2: keyctl$assume_authority(0x10, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:07:16 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) (async) [ 366.575842][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 366.582625][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 23:07:16 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x73}, "7bdd8d98447a9394e9e120480c1c15a46002e7f2d52314dd488a327f6877ab151dc04cf20b240e7aba8fedcbfadd4e85304b1b737d24420e897050a9c5375b270cbba769eafa74b514c38f25b5991ca01e4dbdee9bcc58e24a3f6bdbe22921995a33eee356272b23bff9c110f500a389d15aac"}, 0x77) 23:07:16 executing program 1: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 23:07:16 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04220c03aaaaaaaaaa00000700caf9dc00000000000082dee7000000000000bef172000000aaaaaaaaaa000000000f110f000000"], 0x7e) [ 366.617350][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 366.623380][ T15] usbhid: probe of 4-1:0.0 failed with error -71 [ 366.640611][ T15] usb 4-1: USB disconnect, device number 79 23:07:16 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04220c03aaaaaaaaaa00000700caf9dc00000000000082dee7000000000000bef172000000aaaaaaaaaa000000000f110f000000"], 0x7e) 23:07:16 executing program 2: keyctl$assume_authority(0x10, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:07:16 executing program 1: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) [ 366.691823][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 366.726539][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 366.732943][ T3653] Bluetooth: hci1: wrong event for mode 0 [ 366.760481][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 367.047262][ T15] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 367.407301][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.418472][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.428615][ T15] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 367.437904][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.448223][ T15] usb 4-1: config 0 descriptor?? [ 367.928582][ T15] ortek 0003:05A4:2000.0014: global environment stack underflow [ 367.936241][ T15] ortek 0003:05A4:2000.0014: item 0 4 1 11 parsing failed [ 367.947521][ T3724] Bluetooth: hci0: command 0x0406 tx timeout [ 367.954014][ T15] ortek: probe of 0003:05A4:2000.0014 failed with error -22 [ 368.037383][ T3724] Bluetooth: hci4: command 0x0409 tx timeout [ 368.130512][ T15] usb 4-1: USB disconnect, device number 80 23:07:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0xb, "80400400"}, @global=@item_012={0x1, 0x1, 0x8, "fd"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0xb, "80400400"}, @global=@item_012={0x1, 0x1, 0x8, "fd"}]}}, 0x0}, 0x0) (async) 23:07:18 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x73}, "7bdd8d98447a9394e9e120480c1c15a46002e7f2d52314dd488a327f6877ab151dc04cf20b240e7aba8fedcbfadd4e85304b1b737d24420e897050a9c5375b270cbba769eafa74b514c38f25b5991ca01e4dbdee9bcc58e24a3f6bdbe22921995a33eee356272b23bff9c110f500a389d15aac"}, 0x77) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x73}, "7bdd8d98447a9394e9e120480c1c15a46002e7f2d52314dd488a327f6877ab151dc04cf20b240e7aba8fedcbfadd4e85304b1b737d24420e897050a9c5375b270cbba769eafa74b514c38f25b5991ca01e4dbdee9bcc58e24a3f6bdbe22921995a33eee356272b23bff9c110f500a389d15aac"}, 0x77) (async) 23:07:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xad}, "0306c0a3696093ec1bc2591bc5ed4dec5172160770addb9499c5ba8ce3aeee20ff0baaf9d590f4f11a564060741ea1800d4cf625265a36fd675c2ec45560b1931fcbcda7aaed61fdcac2741db9e6fe6b74da343f2bf9d67b3225d91f511d97b2c74e4d1b5b607394806e7ddac10fffe0ef86f913d318490db3a0eabd896fe81f725f370c00d0cd22930a030b9b26540987d46af72bcdc854b386753844ef63b3128b3795a272583036e3e6b116"}, 0xb1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x21}, {0x8, [{0xc17dec2a7b65bc4c, 0x2cc}, {0xc9, 0x6}, {0xc9, 0x80}, {0xc8, 0x9}, {0xc9, 0x2}, {0xc9, 0xb6}, {0xc9, 0x1}, {0xc9, 0x3}]}}}, 0x24) 23:07:18 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) (async) 23:07:18 executing program 2: keyctl$assume_authority(0x10, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 23:07:18 executing program 1: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) (async) 23:07:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xad}, "0306c0a3696093ec1bc2591bc5ed4dec5172160770addb9499c5ba8ce3aeee20ff0baaf9d590f4f11a564060741ea1800d4cf625265a36fd675c2ec45560b1931fcbcda7aaed61fdcac2741db9e6fe6b74da343f2bf9d67b3225d91f511d97b2c74e4d1b5b607394806e7ddac10fffe0ef86f913d318490db3a0eabd896fe81f725f370c00d0cd22930a030b9b26540987d46af72bcdc854b386753844ef63b3128b3795a272583036e3e6b116"}, 0xb1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x21}, {0x8, [{0xc17dec2a7b65bc4c, 0x2cc}, {0xc9, 0x6}, {0xc9, 0x80}, {0xc8, 0x9}, {0xc9, 0x2}, {0xc9, 0xb6}, {0xc9, 0x1}, {0xc9, 0x3}]}}}, 0x24) [ 368.661110][ T3653] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 368.663075][ T3655] Bluetooth: hci1: wrong event for mode 0 [ 368.685004][ T3655] Bluetooth: hci1: wrong event for mode 0 23:07:18 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb3}, "1a60752e9881c977b8c71e68e3c57f26bd63059a5061a84037dc289a6b41bb01d7bca241343666b277d84e62d2ae21938c0c5682b3fab7167075570d37a00adec23459a259b3e9ec7b809cd7491011d3dc8320cb65cfd8f4273f24aacf4732d4985bd1272d00fd0121d0b0c9ff587fb6b479901026e369d7a18e70b377091a7f8b659818cdebac41e0149a16d5aaaf63b5aa8a1a70f08e7d33c2726e970cdae505eafb451ed2a9037b3a0a1410e1bc4e9749ac"}, 0xb7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc8, "0995a9", "1cdb64", "ea12ba", "e76dc0", 0x1, 0x1, 0x0, 0x5, 0x7f, 0x81, 0x7f, 0x80, 0xba1, 0x1f}}}}, 0x20) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcc}, "c02a7b9128e4b9638e3d0b72156bd73b6e1387709b1d978adfa4ee12a5c0267a028ee53555e78eda5f7db6c2a89dcb135f3d716e666c32b27f3dc88e26a6bce8bfde7fab905aaca4e47de6720fe9a4b5cef796c6498c943dbbcffb29d943dd7f3a9590ecdb222bbfb149ee4863e83f0bd85eb1d83d52d74b82022911823a723c371b0d81f286f3a776c14f8ddcb3f73595c962fb56bd43ad3a8024b30932fc6c5d9e91e40cffbfc7e40094636c13a0d401d0ed1953147fdf9f95df58bb9c0de42af2371d4f8ef1b1e6f6b538"}, 0xd0) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfd}, "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"}, 0x101) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf4}, "848c192053b05b3a03a127524c8ad9a40e658e65bdb5aaf8439c4dfc18e27151d4ec5260dbc81f751b07c8eb2171fab8a4012a4e1d62f3f763548b031c5a232cea9271df793521d71f3668842b176e43fb58103100bf18370585ec4cf1f71d64dddc65485b987b8c2ad98e4eec722c4dac22f347a8d9a4206e1f7e7a358e40ba1073f16877e5e4da5f3aad57042aaba6a59cd4816c5cc03813dd48f1af1a407565dccfd87ae3b09053401a937d473d318f2679c1109e54184bda04149443c61a0463d0accf63464b71f2544b7e1b6c6838b664cdcdb236f85f69424e732a78599c1bb4ea50fa49822f81f9002546377745c45ce1"}, 0xf8) 23:07:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xad}, "0306c0a3696093ec1bc2591bc5ed4dec5172160770addb9499c5ba8ce3aeee20ff0baaf9d590f4f11a564060741ea1800d4cf625265a36fd675c2ec45560b1931fcbcda7aaed61fdcac2741db9e6fe6b74da343f2bf9d67b3225d91f511d97b2c74e4d1b5b607394806e7ddac10fffe0ef86f913d318490db3a0eabd896fe81f725f370c00d0cd22930a030b9b26540987d46af72bcdc854b386753844ef63b3128b3795a272583036e3e6b116"}, 0xb1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x21}, {0x8, [{0xc17dec2a7b65bc4c, 0x2cc}, {0xc9, 0x6}, {0xc9, 0x80}, {0xc8, 0x9}, {0xc9, 0x2}, {0xc9, 0xb6}, {0xc9, 0x1}, {0xc9, 0x3}]}}}, 0x24) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@fixed, 0x0, 0x7, 0x0, "caf9dc"}, {@any, 0x0, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xad}, "0306c0a3696093ec1bc2591bc5ed4dec5172160770addb9499c5ba8ce3aeee20ff0baaf9d590f4f11a564060741ea1800d4cf625265a36fd675c2ec45560b1931fcbcda7aaed61fdcac2741db9e6fe6b74da343f2bf9d67b3225d91f511d97b2c74e4d1b5b607394806e7ddac10fffe0ef86f913d318490db3a0eabd896fe81f725f370c00d0cd22930a030b9b26540987d46af72bcdc854b386753844ef63b3128b3795a272583036e3e6b116"}, 0xb1) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x21}, {0x8, [{0xc17dec2a7b65bc4c, 0x2cc}, {0xc9, 0x6}, {0xc9, 0x80}, {0xc8, 0x9}, {0xc9, 0x2}, {0xc9, 0xb6}, {0xc9, 0x1}, {0xc9, 0x3}]}}}, 0x24) (async) [ 368.718602][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 23:07:19 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001300)={0x5, 0x0, [{0xf000, 0x0, &(0x7f0000001040)}, {0x2, 0xf5, &(0x7f0000001080)=""/245}, {0x2000, 0x24, &(0x7f0000001180)=""/36}, {0x4000, 0xd0, &(0x7f00000011c0)=""/208}, {0x4, 0x3c, &(0x7f00000012c0)=""/60}]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "5f57d8895db7c41ffc43022a1e80f7bb"}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="010100000000000028438acf21d141c9ca6dbf49089c69"], 0x9) 23:07:19 executing program 2: io_setup(0x101, &(0x7f00000006c0)=0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000040)="c98f85e4ef44b889e6c21ad379b0f5535df48cd637a6171c61c4f206d50d6c06a14484b577f9c39bd6a760e237bf0d6562ef60f1c789aa5823febb13c46caf1c9e83ae156d9b3e18a27ffc4d34b38c8b4d7381b1", 0x54, 0x400, 0x0, 0x1, r2}, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x2, 0x7ff}}]}}, 0x11) 23:07:19 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x73}, "7bdd8d98447a9394e9e120480c1c15a46002e7f2d52314dd488a327f6877ab151dc04cf20b240e7aba8fedcbfadd4e85304b1b737d24420e897050a9c5375b270cbba769eafa74b514c38f25b5991ca01e4dbdee9bcc58e24a3f6bdbe22921995a33eee356272b23bff9c110f500a389d15aac"}, 0x77) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x7f, 0xc8, "da0ec312d20aadfa"}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x73}, "7bdd8d98447a9394e9e120480c1c15a46002e7f2d52314dd488a327f6877ab151dc04cf20b240e7aba8fedcbfadd4e85304b1b737d24420e897050a9c5375b270cbba769eafa74b514c38f25b5991ca01e4dbdee9bcc58e24a3f6bdbe22921995a33eee356272b23bff9c110f500a389d15aac"}, 0x77) (async) [ 368.821824][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 368.829458][ T3655] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 368.860577][ T3655] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 368.870220][ T3655] CPU: 0 PID: 3655 Comm: kworker/u5:8 Not tainted 6.0.0-rc7-syzkaller-00162-g5a77386984b5 #0 [ 368.880406][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 368.890493][ T3655] Workqueue: hci1 hci_rx_work [ 368.895304][ T3655] Call Trace: [ 368.898601][ T3655] [ 368.901554][ T3655] dump_stack_lvl+0xcd/0x134 [ 368.906254][ T3655] sysfs_warn_dup.cold+0x1c/0x29 [ 368.911254][ T3655] sysfs_create_dir_ns+0x233/0x290 [ 368.916451][ T3655] ? sysfs_create_mount_point+0xb0/0xb0 [ 368.922033][ T3655] ? rwlock_bug.part.0+0x90/0x90 [ 368.927015][ T3655] ? do_raw_spin_unlock+0x171/0x230 [ 368.932252][ T3655] kobject_add_internal+0x2c9/0x8f0 [ 368.937537][ T3655] ? kasan_quarantine_put+0xb1/0x210 [ 368.942870][ T3655] kobject_add+0x150/0x1c0 [ 368.947321][ T3655] ? kset_create_and_add+0x1a0/0x1a0 [ 368.952646][ T3655] ? kfree_const+0x51/0x60 [ 368.957098][ T3655] ? kfree+0xe2/0x580 [ 368.961109][ T3655] ? rcu_read_lock_sched_held+0x3a/0x70 [ 368.966696][ T3655] device_add+0x368/0x1e90 [ 368.971210][ T3655] ? dev_set_name+0xbb/0xf0 [ 368.975744][ T3655] ? device_initialize+0x540/0x540 [ 368.980887][ T3655] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 368.987159][ T3655] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 368.993235][ T3655] ? lock_downgrade+0x6e0/0x6e0 [ 368.998122][ T3655] ? hci_event_packet+0x425/0xfd0 [ 369.003180][ T3655] hci_conn_add_sysfs+0x9b/0x1b0 [ 369.008209][ T3655] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 369.014056][ T3655] ? hci_cc_le_set_random_addr+0x290/0x290 [ 369.019902][ T3655] ? wait_for_completion_io_timeout+0x20/0x20 [ 369.026074][ T3655] hci_le_meta_evt+0x2b8/0x510 [ 369.030877][ T3655] ? hci_cc_le_set_random_addr+0x290/0x290 [ 369.036723][ T3655] hci_event_packet+0x63d/0xfd0 [ 369.041606][ T3655] ? hci_conn_drop+0x2f0/0x2f0 [ 369.046394][ T3655] ? hci_cs_create_conn+0x3a0/0x3a0 [ 369.051588][ T3655] ? kcov_remote_start+0x156/0x7a0 [ 369.056706][ T3655] hci_rx_work+0xae7/0x1230 [ 369.061210][ T3655] process_one_work+0x991/0x1610 [ 369.066157][ T3655] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 369.071528][ T3655] ? rwlock_bug.part.0+0x90/0x90 [ 369.076459][ T3655] ? _raw_spin_lock_irq+0x41/0x50 [ 369.081546][ T3655] worker_thread+0x665/0x1080 [ 369.086247][ T3655] ? __kthread_parkme+0x15f/0x220 [ 369.091270][ T3655] ? process_one_work+0x1610/0x1610 [ 369.096462][ T3655] kthread+0x2e4/0x3a0 [ 369.100521][ T3655] ? kthread_complete_and_exit+0x40/0x40 [ 369.106146][ T3655] ret_from_fork+0x1f/0x30 [ 369.110565][ T3655] [ 369.118173][ T3724] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 369.123565][ T3655] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 369.139808][ T3655] Bluetooth: hci1: failed to register connection device [ 369.547567][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.558526][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.568733][ T3724] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 369.578118][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.594255][ T3724] usb 4-1: config 0 descriptor?? [ 370.068518][ T3724] ortek 0003:05A4:2000.0015: global environment stack underflow [ 370.076180][ T3724] ortek 0003:05A4:2000.0015: item 0 4 1 11 parsing failed [ 370.085869][ T3724] ortek: probe of 0003:05A4:2000.0015 failed with error -22 [ 370.107490][ T3724] Bluetooth: hci4: command 0x0409 tx timeout [ 370.270225][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.281220][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.227334][ T15] Bluetooth: hci1: command 0x206e tx timeout 23:07:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0xb, "80400400"}, @global=@item_012={0x1, 0x1, 0x8, "fd"}]}}, 0x0}, 0x0) 23:07:21 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001300)={0x5, 0x0, [{0xf000, 0x0, &(0x7f0000001040)}, {0x2, 0xf5, &(0x7f0000001080)=""/245}, {0x2000, 0x24, &(0x7f0000001180)=""/36}, {0x4000, 0xd0, &(0x7f00000011c0)=""/208}, {0x4, 0x3c, &(0x7f00000012c0)=""/60}]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "5f57d8895db7c41ffc43022a1e80f7bb"}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="010100000000000028438acf21d141c9ca6dbf49089c69"], 0x9) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001300)={0x5, 0x0, [{0xf000, 0x0, &(0x7f0000001040)}, {0x2, 0xf5, &(0x7f0000001080)=""/245}, {0x2000, 0x24, &(0x7f0000001180)=""/36}, {0x4000, 0xd0, &(0x7f00000011c0)=""/208}, {0x4, 0x3c, &(0x7f00000012c0)=""/60}]}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "5f57d8895db7c41ffc43022a1e80f7bb"}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="010100000000000028438acf21d141c9ca6dbf49089c69"], 0x9) (async) 23:07:21 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb3}, "1a60752e9881c977b8c71e68e3c57f26bd63059a5061a84037dc289a6b41bb01d7bca241343666b277d84e62d2ae21938c0c5682b3fab7167075570d37a00adec23459a259b3e9ec7b809cd7491011d3dc8320cb65cfd8f4273f24aacf4732d4985bd1272d00fd0121d0b0c9ff587fb6b479901026e369d7a18e70b377091a7f8b659818cdebac41e0149a16d5aaaf63b5aa8a1a70f08e7d33c2726e970cdae505eafb451ed2a9037b3a0a1410e1bc4e9749ac"}, 0xb7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc8, "0995a9", "1cdb64", "ea12ba", "e76dc0", 0x1, 0x1, 0x0, 0x5, 0x7f, 0x81, 0x7f, 0x80, 0xba1, 0x1f}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcc}, "c02a7b9128e4b9638e3d0b72156bd73b6e1387709b1d978adfa4ee12a5c0267a028ee53555e78eda5f7db6c2a89dcb135f3d716e666c32b27f3dc88e26a6bce8bfde7fab905aaca4e47de6720fe9a4b5cef796c6498c943dbbcffb29d943dd7f3a9590ecdb222bbfb149ee4863e83f0bd85eb1d83d52d74b82022911823a723c371b0d81f286f3a776c14f8ddcb3f73595c962fb56bd43ad3a8024b30932fc6c5d9e91e40cffbfc7e40094636c13a0d401d0ed1953147fdf9f95df58bb9c0de42af2371d4f8ef1b1e6f6b538"}, 0xd0) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfd}, "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"}, 0x101) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf4}, "848c192053b05b3a03a127524c8ad9a40e658e65bdb5aaf8439c4dfc18e27151d4ec5260dbc81f751b07c8eb2171fab8a4012a4e1d62f3f763548b031c5a232cea9271df793521d71f3668842b176e43fb58103100bf18370585ec4cf1f71d64dddc65485b987b8c2ad98e4eec722c4dac22f347a8d9a4206e1f7e7a358e40ba1073f16877e5e4da5f3aad57042aaba6a59cd4816c5cc03813dd48f1af1a407565dccfd87ae3b09053401a937d473d318f2679c1109e54184bda04149443c61a0463d0accf63464b71f2544b7e1b6c6838b664cdcdb236f85f69424e732a78599c1bb4ea50fa49822f81f9002546377745c45ce1"}, 0xf8) 23:07:21 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@none, 0x7f, 0x4, 0x6, "b4f754", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80, 0x1f, 0x2, "29ffff", 0x8000}, {@any, 0x6, 0x20, 0x80, "d15cea", 0x8}, {@none, 0x1, 0x8, 0xff, "d84d6f", 0xfffe}]}}}, 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x7, 0xc8, @none, 0x0, 0x80, 0x81, 0x4, 0x1ff, 0x5}}}, 0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc8, "882764", "0d7d96", "062bd9", "face6f", 0x0, 0x0, 0x1f, 0x4, 0xb1, 0xb2, 0x9, 0x0, 0x1, 0x800}}}}, 0x20) 23:07:21 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x7, 0x0, "fff9dc"}, {@any, 0x8, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x22, 0x2}, {0x4}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x46}}}, 0x4) 23:07:21 executing program 2: io_setup(0x101, &(0x7f00000006c0)=0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000040)="c98f85e4ef44b889e6c21ad379b0f5535df48cd637a6171c61c4f206d50d6c06a14484b577f9c39bd6a760e237bf0d6562ef60f1c789aa5823febb13c46caf1c9e83ae156d9b3e18a27ffc4d34b38c8b4d7381b1", 0x54, 0x400, 0x0, 0x1, r2}, &(0x7f0000000100)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x2, 0x7ff}}]}}, 0x11) [ 371.718257][ T3166] usb 4-1: USB disconnect, device number 81 [ 371.765863][ T3655] Bluetooth: hci5: hardware error 0x46 [ 371.775050][ T3653] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 371.784646][ T3653] CPU: 1 PID: 3653 Comm: kworker/u5:7 Not tainted 6.0.0-rc7-syzkaller-00162-g5a77386984b5 #0 [ 371.794832][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 371.804929][ T3653] Workqueue: hci1 hci_rx_work [ 371.809662][ T3653] Call Trace: [ 371.812961][ T3653] 23:07:22 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb3}, "1a60752e9881c977b8c71e68e3c57f26bd63059a5061a84037dc289a6b41bb01d7bca241343666b277d84e62d2ae21938c0c5682b3fab7167075570d37a00adec23459a259b3e9ec7b809cd7491011d3dc8320cb65cfd8f4273f24aacf4732d4985bd1272d00fd0121d0b0c9ff587fb6b479901026e369d7a18e70b377091a7f8b659818cdebac41e0149a16d5aaaf63b5aa8a1a70f08e7d33c2726e970cdae505eafb451ed2a9037b3a0a1410e1bc4e9749ac"}, 0xb7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc8, "0995a9", "1cdb64", "ea12ba", "e76dc0", 0x1, 0x1, 0x0, 0x5, 0x7f, 0x81, 0x7f, 0x80, 0xba1, 0x1f}}}}, 0x20) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcc}, "c02a7b9128e4b9638e3d0b72156bd73b6e1387709b1d978adfa4ee12a5c0267a028ee53555e78eda5f7db6c2a89dcb135f3d716e666c32b27f3dc88e26a6bce8bfde7fab905aaca4e47de6720fe9a4b5cef796c6498c943dbbcffb29d943dd7f3a9590ecdb222bbfb149ee4863e83f0bd85eb1d83d52d74b82022911823a723c371b0d81f286f3a776c14f8ddcb3f73595c962fb56bd43ad3a8024b30932fc6c5d9e91e40cffbfc7e40094636c13a0d401d0ed1953147fdf9f95df58bb9c0de42af2371d4f8ef1b1e6f6b538"}, 0xd0) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfd}, "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"}, 0x101) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf4}, "848c192053b05b3a03a127524c8ad9a40e658e65bdb5aaf8439c4dfc18e27151d4ec5260dbc81f751b07c8eb2171fab8a4012a4e1d62f3f763548b031c5a232cea9271df793521d71f3668842b176e43fb58103100bf18370585ec4cf1f71d64dddc65485b987b8c2ad98e4eec722c4dac22f347a8d9a4206e1f7e7a358e40ba1073f16877e5e4da5f3aad57042aaba6a59cd4816c5cc03813dd48f1af1a407565dccfd87ae3b09053401a937d473d318f2679c1109e54184bda04149443c61a0463d0accf63464b71f2544b7e1b6c6838b664cdcdb236f85f69424e732a78599c1bb4ea50fa49822f81f9002546377745c45ce1"}, 0xf8) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb3}, "1a60752e9881c977b8c71e68e3c57f26bd63059a5061a84037dc289a6b41bb01d7bca241343666b277d84e62d2ae21938c0c5682b3fab7167075570d37a00adec23459a259b3e9ec7b809cd7491011d3dc8320cb65cfd8f4273f24aacf4732d4985bd1272d00fd0121d0b0c9ff587fb6b479901026e369d7a18e70b377091a7f8b659818cdebac41e0149a16d5aaaf63b5aa8a1a70f08e7d33c2726e970cdae505eafb451ed2a9037b3a0a1410e1bc4e9749ac"}, 0xb7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc8, "0995a9", "1cdb64", "ea12ba", "e76dc0", 0x1, 0x1, 0x0, 0x5, 0x7f, 0x81, 0x7f, 0x80, 0xba1, 0x1f}}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcc}, "c02a7b9128e4b9638e3d0b72156bd73b6e1387709b1d978adfa4ee12a5c0267a028ee53555e78eda5f7db6c2a89dcb135f3d716e666c32b27f3dc88e26a6bce8bfde7fab905aaca4e47de6720fe9a4b5cef796c6498c943dbbcffb29d943dd7f3a9590ecdb222bbfb149ee4863e83f0bd85eb1d83d52d74b82022911823a723c371b0d81f286f3a776c14f8ddcb3f73595c962fb56bd43ad3a8024b30932fc6c5d9e91e40cffbfc7e40094636c13a0d401d0ed1953147fdf9f95df58bb9c0de42af2371d4f8ef1b1e6f6b538"}, 0xd0) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfd}, "e8fe3ee6dfe528d4237cb489fdb364b17fc9af287c3caaab59276dedd087e225dd735dc9645034c951e87a87086107c4a76f6cd26eac42c043037540a1abed3708fbe6bb7c2c04acc7b5e30f910fc1c842578fc450c8b6845cda9b50927603a83c2925cd1692d9b41ddcac9100004a716d3797bcbf46d11be9285a3225bc963a29b5e20938369f902b63e1b14eb772e5c8f2909824aa4d8ec4e5ffe8860194fa7a85761269861195cda8306b9f36e89611ea9f9fab19790149b95384e86ef074bf41f52ceb10bc2cf0c3b16c1836b73d99f07a311a67d5dc1ccc3f432723167aba74db3482cea7912e6b246e75f32f2bea6af6f26bbac73748c4b3bfd9"}, 0x101) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf4}, "848c192053b05b3a03a127524c8ad9a40e658e65bdb5aaf8439c4dfc18e27151d4ec5260dbc81f751b07c8eb2171fab8a4012a4e1d62f3f763548b031c5a232cea9271df793521d71f3668842b176e43fb58103100bf18370585ec4cf1f71d64dddc65485b987b8c2ad98e4eec722c4dac22f347a8d9a4206e1f7e7a358e40ba1073f16877e5e4da5f3aad57042aaba6a59cd4816c5cc03813dd48f1af1a407565dccfd87ae3b09053401a937d473d318f2679c1109e54184bda04149443c61a0463d0accf63464b71f2544b7e1b6c6838b664cdcdb236f85f69424e732a78599c1bb4ea50fa49822f81f9002546377745c45ce1"}, 0xf8) (async) [ 371.815917][ T3653] dump_stack_lvl+0xcd/0x134 [ 371.820549][ T3653] sysfs_warn_dup.cold+0x1c/0x29 [ 371.825527][ T3653] sysfs_create_dir_ns+0x233/0x290 [ 371.830676][ T3653] ? sysfs_create_mount_point+0xb0/0xb0 [ 371.833259][ T3636] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 371.836242][ T3653] ? rwlock_bug.part.0+0x90/0x90 [ 371.836284][ T3653] ? do_raw_spin_unlock+0x171/0x230 [ 371.836315][ T3653] kobject_add_internal+0x2c9/0x8f0 [ 371.861341][ T3653] kobject_add+0x150/0x1c0 [ 371.865779][ T3653] ? kset_create_and_add+0x1a0/0x1a0 [ 371.871084][ T3653] ? lockdep_init_map_type+0x21a/0x7f0 [ 371.876562][ T3653] ? __raw_spin_lock_init+0x36/0x110 [ 371.881872][ T3653] device_add+0x368/0x1e90 [ 371.886305][ T3653] ? dev_set_name+0xbb/0xf0 [ 371.890817][ T3653] ? device_initialize+0x540/0x540 [ 371.895941][ T3653] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 371.902208][ T3653] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 371.908204][ T3653] ? lock_downgrade+0x6e0/0x6e0 [ 371.913064][ T3653] ? hci_event_packet+0x425/0xfd0 [ 371.918108][ T3653] hci_conn_add_sysfs+0x9b/0x1b0 [ 371.923054][ T3653] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 371.928876][ T3653] ? hci_cc_le_set_random_addr+0x290/0x290 [ 371.934704][ T3653] ? wait_for_completion_io_timeout+0x20/0x20 [ 371.940790][ T3653] hci_le_meta_evt+0x2b8/0x510 [ 371.945563][ T3653] ? hci_cc_le_set_random_addr+0x290/0x290 [ 371.951391][ T3653] hci_event_packet+0x63d/0xfd0 [ 371.956248][ T3653] ? hci_conn_drop+0x2f0/0x2f0 [ 371.961024][ T3653] ? hci_cs_create_conn+0x3a0/0x3a0 [ 371.966226][ T3653] ? kcov_remote_start+0x156/0x7a0 [ 371.971365][ T3653] hci_rx_work+0xae7/0x1230 [ 371.975890][ T3653] process_one_work+0x991/0x1610 [ 371.980849][ T3653] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 371.986236][ T3653] ? rwlock_bug.part.0+0x90/0x90 [ 371.991181][ T3653] ? _raw_spin_lock_irq+0x41/0x50 [ 371.996221][ T3653] worker_thread+0x665/0x1080 [ 372.000919][ T3653] ? process_one_work+0x1610/0x1610 [ 372.006128][ T3653] kthread+0x2e4/0x3a0 [ 372.010206][ T3653] ? kthread_complete_and_exit+0x40/0x40 23:07:22 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001300)={0x5, 0x0, [{0xf000, 0x0, &(0x7f0000001040)}, {0x2, 0xf5, &(0x7f0000001080)=""/245}, {0x2000, 0x24, &(0x7f0000001180)=""/36}, {0x4000, 0xd0, &(0x7f00000011c0)=""/208}, {0x4, 0x3c, &(0x7f00000012c0)=""/60}]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "5f57d8895db7c41ffc43022a1e80f7bb"}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="010100000000000028438acf21d141c9ca6dbf49089c69"], 0x9) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001300)={0x5, 0x0, [{0xf000, 0x0, &(0x7f0000001040)}, {0x2, 0xf5, &(0x7f0000001080)=""/245}, {0x2000, 0x24, &(0x7f0000001180)=""/36}, {0x4000, 0xd0, &(0x7f00000011c0)=""/208}, {0x4, 0x3c, &(0x7f00000012c0)=""/60}]}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "5f57d8895db7c41ffc43022a1e80f7bb"}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="010100000000000028438acf21d141c9ca6dbf49089c69"], 0x9) (async) [ 372.015848][ T3653] ret_from_fork+0x1f/0x30 [ 372.020289][ T3653] [ 372.026954][ T3636] CPU: 0 PID: 3636 Comm: kworker/u5:1 Not tainted 6.0.0-rc7-syzkaller-00162-g5a77386984b5 #0 [ 372.037157][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 372.047206][ T3653] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 372.047238][ T3653] Bluetooth: hci1: failed to register connection device [ 372.060393][ T3636] Workqueue: hci4 hci_rx_work [ 372.060424][ T3636] Call Trace: [ 372.060432][ T3636] [ 372.078270][ T3636] dump_stack_lvl+0xcd/0x134 [ 372.082901][ T3636] sysfs_warn_dup.cold+0x1c/0x29 [ 372.087880][ T3636] sysfs_create_dir_ns+0x233/0x290 [ 372.093041][ T3636] ? sysfs_create_mount_point+0xb0/0xb0 [ 372.098617][ T3636] ? rwlock_bug.part.0+0x90/0x90 [ 372.103595][ T3636] ? do_raw_spin_unlock+0x171/0x230 [ 372.104681][ T3653] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 372.108813][ T3636] kobject_add_internal+0x2c9/0x8f0 [ 372.108842][ T3636] ? kasan_quarantine_put+0xb1/0x210 [ 372.108878][ T3636] kobject_add+0x150/0x1c0 [ 372.108901][ T3636] ? kset_create_and_add+0x1a0/0x1a0 [ 372.138501][ T3636] ? kfree_const+0x51/0x60 [ 372.142934][ T3636] ? kfree+0xe2/0x580 [ 372.146924][ T3636] ? rcu_read_lock_sched_held+0x3a/0x70 [ 372.152487][ T3636] device_add+0x368/0x1e90 [ 372.156921][ T3636] ? dev_set_name+0xbb/0xf0 [ 372.161434][ T3636] ? device_initialize+0x540/0x540 [ 372.166557][ T3636] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 372.172818][ T3636] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 372.178819][ T3636] ? lock_downgrade+0x6e0/0x6e0 [ 372.183682][ T3636] ? hci_event_packet+0x425/0xfd0 [ 372.188724][ T3636] hci_conn_add_sysfs+0x9b/0x1b0 [ 372.193671][ T3636] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 372.199503][ T3636] ? hci_cc_le_set_random_addr+0x290/0x290 [ 372.205336][ T3636] ? wait_for_completion_io_timeout+0x20/0x20 [ 372.211430][ T3636] hci_le_meta_evt+0x2b8/0x510 [ 372.216209][ T3636] ? hci_cc_le_set_random_addr+0x290/0x290 [ 372.222040][ T3636] hci_event_packet+0x63d/0xfd0 [ 372.226903][ T3636] ? hci_conn_drop+0x2f0/0x2f0 [ 372.231681][ T3636] ? hci_cs_create_conn+0x3a0/0x3a0 [ 372.236888][ T3636] ? kcov_remote_start+0x156/0x7a0 [ 372.242030][ T3636] hci_rx_work+0xae7/0x1230 [ 372.246558][ T3636] process_one_work+0x991/0x1610 [ 372.251518][ T3636] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 372.256909][ T3636] ? rwlock_bug.part.0+0x90/0x90 [ 372.261855][ T3636] ? _raw_spin_lock_irq+0x41/0x50 [ 372.266897][ T3636] worker_thread+0x665/0x1080 [ 372.271605][ T3636] ? process_one_work+0x1610/0x1610 [ 372.276820][ T3636] kthread+0x2e4/0x3a0 [ 372.280899][ T3636] ? kthread_complete_and_exit+0x40/0x40 [ 372.286546][ T3636] ret_from_fork+0x1f/0x30 [ 372.290991][ T3636] [ 372.294016][ T3653] CPU: 1 PID: 3653 Comm: kworker/u5:7 Not tainted 6.0.0-rc7-syzkaller-00162-g5a77386984b5 #0 [ 372.304202][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 372.307948][ T3636] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 372.314267][ T3653] Workqueue: hci1 hci_rx_work [ 372.327535][ T3636] Bluetooth: hci4: failed to register connection device [ 372.332120][ T3653] Call Trace: [ 372.332130][ T3653] [ 372.345282][ T3653] dump_stack_lvl+0xcd/0x134 [ 372.349908][ T3653] sysfs_warn_dup.cold+0x1c/0x29 [ 372.354874][ T3653] sysfs_create_dir_ns+0x233/0x290 [ 372.360008][ T3653] ? sysfs_create_mount_point+0xb0/0xb0 23:07:22 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x7, 0x0, "fff9dc"}, {@any, 0x8, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x22, 0x2}, {0x4}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x46}}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@none, 0x0, 0x7, 0x0, "fff9dc"}, {@any, 0x8, 0x0, 0x0, "bef172"}, {@fixed, 0x0, 0x0, 0x0, "0f110f"}]}}}, 0x31) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x22, 0x2}, {0x4}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x46}}}, 0x4) (async) 23:07:22 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="7072a310e9b34fe12387ec649314124064245d94891695320364a452d649ed6b93228e94de1bdbb1e896aa107f4f1c577a96098c7a91972d3aab535d319ee93b7714282cd1659f33fefe8916889319e6cf3612c6ec25b8250aae442d5b46d229d5a6ec48ee8b9e3ac85c7f748ec5a4ecb6044dd881e6901f34090408a25f5c3c550ac9a7000d86ba769f1547eb7c6957e2fbf631ef199c1b7d6d509ed18b9d6cea7d9bbe3d4eb77d559d4efbff82be9130c253056fec9ef69674f3d173a6cc77c2865a063dcd85461ee6a2b69e3941266d3361e42474fe63aabf470eb2a57f78c046e62f2d144778df56a4d98a52966dbd47b1a5981d7b3425c4e591fbc8919eb4cc511ce40901ee965129fc6b1413d7e017be884f2405cccada0f09da5365b476b94f5f8cb6e26c2fdcc72bd1cba35bed1ef2662c467c0e0c98ef4c325e025875b97150241993e56e1380201b7f3c7b557eb0ff52796cf5edbedcff7588"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@none, 0x7f, 0x4, 0x6, "b4f754", 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80, 0x1f, 0x2, "29ffff", 0x8000}, {@any, 0x6, 0x20, 0x80, "d15cea", 0x8}, {@none, 0x1, 0x8, 0xff, "d84d6f", 0xfffe}]}}}, 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x7, 0xc8, @none, 0x0, 0x80, 0x81, 0x4, 0x1ff, 0x5}}}, 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc8, "882764", "0d7d96", "062bd9", "face6f", 0x0, 0x0, 0x1f, 0x4, 0xb1, 0xb2, 0x9, 0x0, 0x1, 0x800}}}}, 0x20) [ 372.365591][ T3653] ? rwlock_bug.part.0+0x90/0x90 [ 372.370577][ T3653] ? do_raw_spin_unlock+0x171/0x230 [ 372.375814][ T3653] kobject_add_internal+0x2c9/0x8f0 [ 372.381065][ T3653] ? asm_exc_stack_segment+0x11/0x30 [ 372.386392][ T3653] kobject_add+0x150/0x1c0 [ 372.390845][ T3653] ? kset_create_and_add+0x1a0/0x1a0 [ 372.396173][ T3653] ? lockdep_init_map_type+0x21a/0x7f0 [ 372.401673][ T3653] ? __raw_spin_lock_init+0x36/0x110 [ 372.407002][ T3653] device_add+0x368/0x1e90 [ 372.411457][ T3653] ? dev_set_name+0xbb/0xf0 23:07:22 executing program 4: fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043590000400"], 0x6) [ 372.415991][ T3653] ? device_initialize+0x540/0x540 [ 372.421139][ T3653] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 372.427413][ T3653] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 372.433429][ T3653] ? lock_downgrade+0x6e0/0x6e0 [ 372.438310][ T3653] ? hci_event_packet+0x425/0xfd0 [ 372.443380][ T3653] hci_conn_add_sysfs+0x9b/0x1b0 [ 372.448357][ T3653] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 372.454207][ T3653] ? hci_cc_le_set_random_addr+0x290/0x290 [ 372.460053][ T3653] ? wait_for_completion_io_timeout+0x20/0x20 23:07:22 executing program 1: rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) [ 372.466167][ T3653] hci_le_meta_evt+0x2b8/0x510 [ 372.470971][ T3653] ? hci_cc_le_set_random_addr+0x290/0x290 [ 372.476910][ T3653] hci_event_packet+0x63d/0xfd0 [ 372.481794][ T3653] ? hci_conn_drop+0x2f0/0x2f0 [ 372.486591][ T3653] ? hci_cs_create_conn+0x3a0/0x3a0 [ 372.491832][ T3653] ? kcov_remote_start+0x156/0x7a0 [ 372.496999][ T3653] hci_rx_work+0xae7/0x1230 [ 372.501551][ T3653] process_one_work+0x991/0x1610 [ 372.506540][ T3653] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 372.511962][ T3653] ? rwlock_bug.part.0+0x90/0x90 [ 372.516930][ T3653] ? _raw_spin_lock_irq+0x41/0x50 [ 372.521996][ T3653] worker_thread+0x665/0x1080 [ 372.526727][ T3653] ? process_one_work+0x1610/0x1610 [ 372.531967][ T3653] kthread+0x2e4/0x3a0 [ 372.536070][ T3653] ? kthread_complete_and_exit+0x40/0x40 [ 372.541743][ T3653] ret_from_fork+0x1f/0x30 [ 372.546215][ T3653] [ 372.557489][ T3653] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 372.566491][ T3652] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 372.571870][ T3655] ================================================================== [ 372.571882][ T3655] BUG: KASAN: use-after-free in __list_del_entry_valid+0xe8/0x110 [ 372.572012][ T3655] Read of size 8 at addr ffff88801bc704d0 by task kworker/u5:8/3655 [ 372.572032][ T3655] [ 372.572037][ T3655] CPU: 1 PID: 3655 Comm: kworker/u5:8 Not tainted 6.0.0-rc7-syzkaller-00162-g5a77386984b5 #0 [ 372.572062][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 372.572077][ T3655] Workqueue: hci5 hci_error_reset [ 372.572104][ T3655] Call Trace: [ 372.572111][ T3655] [ 372.572120][ T3655] dump_stack_lvl+0xcd/0x134 [ 372.572149][ T3655] print_report.cold+0x2ba/0x719 [ 372.572185][ T3655] ? __list_del_entry_valid+0xe8/0x110 [ 372.572211][ T3655] kasan_report+0xb1/0x1e0 [ 372.572238][ T3655] ? __list_del_entry_valid+0xe8/0x110 [ 372.572266][ T3655] __list_del_entry_valid+0xe8/0x110 [ 372.572293][ T3655] klist_release+0x66/0x480 [ 372.572371][ T3655] ? class_create_release+0x70/0x70 [ 372.572398][ T3655] klist_put+0x151/0x1d0 [ 372.572424][ T3655] device_del+0x46d/0xc80 [ 372.572447][ T3655] ? __device_link_del+0x380/0x380 [ 372.572470][ T3655] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 372.572497][ T3655] hci_conn_del_sysfs+0xdc/0x180 [ 372.572520][ T3655] hci_conn_cleanup+0x315/0x7b0 [ 372.572545][ T3655] hci_conn_del+0x29b/0x790 [ 372.572568][ T3655] hci_conn_hash_flush+0x197/0x260 [ 372.572591][ T3655] hci_dev_close_sync+0x55d/0x1130 [ 372.723091][ T3655] ? hci_dev_open_sync+0x2190/0x2190 [ 372.728390][ T3655] ? lock_downgrade+0x6e0/0x6e0 [ 372.733247][ T3655] ? do_raw_spin_lock+0x120/0x2a0 [ 372.738308][ T3655] hci_dev_do_close+0x2d/0x70 [ 372.742993][ T3655] hci_error_reset+0x96/0x130 [ 372.747684][ T3655] process_one_work+0x991/0x1610 [ 372.752642][ T3655] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 372.758027][ T3655] ? rwlock_bug.part.0+0x90/0x90 [ 372.762971][ T3655] ? _raw_spin_lock_irq+0x41/0x50 [ 372.768006][ T3655] worker_thread+0x665/0x1080 [ 372.772703][ T3655] ? __kthread_parkme+0x15f/0x220 [ 372.777815][ T3655] ? process_one_work+0x1610/0x1610 [ 372.783018][ T3655] kthread+0x2e4/0x3a0 [ 372.787096][ T3655] ? kthread_complete_and_exit+0x40/0x40 [ 372.792734][ T3655] ret_from_fork+0x1f/0x30 [ 372.797165][ T3655] [ 372.800187][ T3655] [ 372.800189][ T3652] CPU: 0 PID: 3652 Comm: kworker/u5:6 Not tainted 6.0.0-rc7-syzkaller-00162-g5a77386984b5 #0 [ 372.802499][ T3655] Allocated by task 3650: [ 372.802511][ T3655] kasan_save_stack+0x1e/0x40 [ 372.812635][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 372.816939][ T3655] __kasan_kmalloc+0xa9/0xd0 [ 372.821594][ T3652] Workqueue: hci4 hci_rx_work [ 372.831624][ T3655] device_add+0x1168/0x1e90 [ 372.836196][ T3652] [ 372.836204][ T3652] Call Trace: [ 372.840846][ T3655] hci_conn_add_sysfs+0x9b/0x1b0 [ 372.845328][ T3652] [ 372.847630][ T3655] hci_conn_complete_evt+0x323/0xe50 [ 372.850900][ T3652] dump_stack_lvl+0xcd/0x134 [ 372.855805][ T3655] hci_event_packet+0x952/0xfd0 [ 372.858738][ T3652] sysfs_warn_dup.cold+0x1c/0x29 [ 372.864001][ T3655] hci_rx_work+0xae7/0x1230 [ 372.868579][ T3652] sysfs_create_dir_ns+0x233/0x290 [ 372.873394][ T3655] process_one_work+0x991/0x1610 [ 372.878312][ T3652] ? sysfs_create_mount_point+0xb0/0xb0 [ 372.882785][ T3655] worker_thread+0x665/0x1080 [ 372.887879][ T3652] ? rwlock_bug.part.0+0x90/0x90 [ 372.892788][ T3655] kthread+0x2e4/0x3a0 [ 372.898318][ T3652] ? do_raw_spin_unlock+0x171/0x230 [ 372.902960][ T3655] ret_from_fork+0x1f/0x30 [ 372.907880][ T3652] kobject_add_internal+0x2c9/0x8f0 [ 372.911918][ T3655] [ 372.911924][ T3655] Freed by task 3655: [ 372.917097][ T3652] ? asm_exc_stack_segment+0x11/0x30 [ 372.921488][ T3655] kasan_save_stack+0x1e/0x40 [ 372.926666][ T3652] kobject_add+0x150/0x1c0 [ 372.928966][ T3655] kasan_set_track+0x21/0x30 [ 372.932936][ T3652] ? kset_create_and_add+0x1a0/0x1a0 [ 372.938189][ T3655] kasan_set_free_info+0x20/0x30 [ 372.942848][ T3652] ? lockdep_init_map_type+0x21a/0x7f0 [ 372.947231][ T3655] ____kasan_slab_free+0x166/0x1c0 [ 372.951806][ T3652] ? __raw_spin_lock_init+0x36/0x110 [ 372.957058][ T3655] slab_free_freelist_hook+0x8b/0x1c0 [ 372.961980][ T3652] device_add+0x368/0x1e90 [ 372.967399][ T3655] kfree+0xe2/0x580 [ 372.972489][ T3652] ? dev_set_name+0xbb/0xf0 [ 372.977740][ T3655] device_add+0x453/0x1e90 [ 372.983092][ T3652] ? device_initialize+0x540/0x540 [ 372.987481][ T3655] hci_conn_add_sysfs+0x9b/0x1b0 [ 372.991273][ T3652] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 372.995746][ T3655] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 373.000141][ T3652] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 373.005224][ T3655] hci_le_meta_evt+0x2b8/0x510 [ 373.010142][ T3652] ? lock_downgrade+0x6e0/0x6e0 [ 373.016350][ T3655] hci_event_packet+0x63d/0xfd0 [ 373.022134][ T3652] ? hci_event_packet+0x425/0xfd0 [ 373.028087][ T3655] hci_rx_work+0xae7/0x1230 [ 373.032838][ T3652] hci_conn_add_sysfs+0x9b/0x1b0 [ 373.037670][ T3655] process_one_work+0x991/0x1610 [ 373.042502][ T3652] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 373.047491][ T3655] worker_thread+0x665/0x1080 [ 373.051977][ T3652] ? hci_cc_le_set_random_addr+0x290/0x290 [ 373.056880][ T3655] kthread+0x2e4/0x3a0 [ 373.061797][ T3652] ? wait_for_completion_io_timeout+0x20/0x20 [ 373.067570][ T3655] ret_from_fork+0x1f/0x30 [ 373.072233][ T3652] hci_le_meta_evt+0x2b8/0x510 [ 373.078003][ T3655] [ 373.078008][ T3655] The buggy address belongs to the object at ffff88801bc70400 [ 373.078008][ T3655] which belongs to the cache kmalloc-512 of size 512 [ 373.082056][ T3652] ? hci_cc_le_set_random_addr+0x290/0x290 [ 373.088100][ T3655] The buggy address is located 208 bytes inside of [ 373.088100][ T3655] 512-byte region [ffff88801bc70400, ffff88801bc70600) [ 373.092506][ T3652] hci_event_packet+0x63d/0xfd0 [ 373.097233][ T3655] [ 373.097239][ T3655] The buggy address belongs to the physical page: [ 373.099544][ T3652] ? hci_conn_drop+0x2f0/0x2f0 [ 373.113566][ T3655] page:ffffea00006f1c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801bc70000 pfn:0x1bc70 [ 373.119351][ T3652] ? hci_cs_create_conn+0x3a0/0x3a0 [ 373.132596][ T3655] head:ffffea00006f1c00 order:2 compound_mapcount:0 compound_pincount:0 [ 373.137425][ T3652] ? kcov_remote_start+0x156/0x7a0 [ 373.139729][ T3655] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 373.146135][ T3652] hci_rx_work+0xae7/0x1230 [ 373.150865][ T3655] raw: 00fff00000010200 ffffea0001eb8408 ffffea0001e3d808 ffff888011841c80 [ 373.162296][ T3652] process_one_work+0x991/0x1610 [ 373.167461][ T3655] raw: ffff88801bc70000 000000000010000a 00000001ffffffff 0000000000000000 [ 373.175761][ T3652] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 373.180831][ T3655] page dumped because: kasan: bad access detected [ 373.180843][ T3655] page_owner tracks the page as allocated [ 373.188790][ T3652] ? rwlock_bug.part.0+0x90/0x90 [ 373.193259][ T3655] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2974, tgid 2974 (udevadm), ts 14970883192, free_ts 14951337529 [ 373.201818][ T3652] ? _raw_spin_lock_irq+0x41/0x50 [ 373.206728][ T3655] get_page_from_freelist+0x109b/0x2ce0 [ 373.215299][ T3652] worker_thread+0x665/0x1080 [ 373.220630][ T3655] __alloc_pages+0x1c7/0x510 [ 373.227042][ T3652] ? process_one_work+0x1610/0x1610 [ 373.232717][ T3655] alloc_pages+0x1a6/0x270 [ 373.237637][ T3652] kthread+0x2e4/0x3a0 [ 373.258517][ T3655] allocate_slab+0x27e/0x3d0 [ 373.263522][ T3652] ? kthread_complete_and_exit+0x40/0x40 [ 373.269043][ T3655] ___slab_alloc+0x7f1/0xe10 [ 373.273701][ T3652] ret_from_fork+0x1f/0x30 [ 373.278258][ T3655] __slab_alloc.constprop.0+0x4d/0xa0 [ 373.283452][ T3652] [ 373.287822][ T3655] __kmalloc_node_track_caller+0x2f1/0x390 [ 373.307386][ T15] Bluetooth: hci1: command 0x206e tx timeout [ 373.311047][ T3655] __alloc_skb+0xd9/0x2f0 [ 373.332199][ T3652] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 373.335521][ T3655] alloc_uevent_skb+0x7b/0x210 [ 373.335548][ T3655] kobject_uevent_env+0xc2e/0x1640 [ 373.335568][ T3655] kobject_synth_uevent+0x701/0x850 [ 373.349015][ T3652] Bluetooth: hci4: failed to register connection device [ 373.353467][ T3655] store_uevent+0x20/0x60 [ 373.353491][ T3655] module_attr_store+0x50/0x80 [ 373.380552][ T3655] sysfs_kf_write+0x110/0x160 [ 373.385263][ T3655] kernfs_fop_write_iter+0x3f8/0x610 [ 373.390571][ T3655] vfs_write+0x9e9/0xdd0 [ 373.394831][ T3655] page last free stack trace: [ 373.399508][ T3655] free_pcp_prepare+0x5e4/0xd20 [ 373.404381][ T3655] free_unref_page+0x19/0x4d0 [ 373.407393][ T3653] Bluetooth: hci1: failed to register connection device [ 373.409062][ T3655] __unfreeze_partials+0x17c/0x1a0 [ 373.409088][ T3655] qlist_free_all+0x6a/0x170 [ 373.409111][ T3655] kasan_quarantine_reduce+0x180/0x200 [ 373.416818][ T3653] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 373.421114][ T3655] __kasan_slab_alloc+0xa2/0xc0 [ 373.421140][ T3655] kmem_cache_alloc_trace+0x2c0/0x3e0 [ 373.421159][ T3655] kernfs_fop_open+0xa5e/0xfd0 [ 373.421181][ T3655] do_dentry_open+0x4a4/0x13a0 [ 373.421205][ T3655] path_openat+0x1c92/0x28f0 [ 373.421224][ T3655] do_filp_open+0x1b6/0x400 [ 373.427578][ T3653] CPU: 0 PID: 3653 Comm: kworker/u5:7 Not tainted 6.0.0-rc7-syzkaller-00162-g5a77386984b5 #0 [ 373.431239][ T3655] do_sys_openat2+0x16d/0x4c0 [ 373.440674][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 373.445500][ T3655] __x64_sys_openat+0x13f/0x1f0 [ 373.450856][ T3653] Workqueue: hci1 hci_rx_work [ 373.455674][ T3655] do_syscall_64+0x35/0xb0 [ 373.460413][ T3653] [ 373.460422][ T3653] Call Trace: [ 373.464976][ T3655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 373.469457][ T3653] [ 373.479581][ T3655] [ 373.479586][ T3655] Memory state around the buggy address: [ 373.484235][ T3653] dump_stack_lvl+0xcd/0x134 [ 373.494269][ T3655] ffff88801bc70380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 373.499104][ T3653] sysfs_warn_dup.cold+0x1c/0x29 [ 373.503754][ T3655] ffff88801bc70400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 373.508145][ T3653] sysfs_create_dir_ns+0x233/0x290 [ 373.510453][ T3655] >ffff88801bc70480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 373.513713][ T3653] ? sysfs_create_mount_point+0xb0/0xb0 [ 373.519574][ T3655] ^ [ 373.519587][ T3655] ffff88801bc70500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 373.522497][ T3653] ? rwlock_bug.part.0+0x90/0x90 [ 373.524807][ T3655] ffff88801bc70580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 373.530417][ T3653] ? do_raw_spin_unlock+0x171/0x230 [ 373.534972][ T3655] ================================================================== [ 373.535423][ T3655] Kernel panic - not syncing: panic_on_warn set ... [ 373.543025][ T3653] kobject_add_internal+0x2c9/0x8f0 [ 373.547967][ T3653] ? asm_exc_stack_segment+0x11/0x30 [ 373.556036][ T3653] kobject_add+0x150/0x1c0 [ 373.561143][ T3653] ? kset_create_and_add+0x1a0/0x1a0 [ 373.569206][ T3653] ? lockdep_init_map_type+0x21a/0x7f0 [ 373.574755][ T3653] ? __raw_spin_lock_init+0x36/0x110 [ 373.581433][ T3653] device_add+0x368/0x1e90 [ 373.589495][ T3653] ? dev_set_name+0xbb/0xf0 [ 373.594433][ T3653] ? device_initialize+0x540/0x540 [ 373.602492][ T3653] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 373.607694][ T3653] ? hci_le_cis_estabilished_evt+0x1ee/0xae0 [ 373.615763][ T3653] ? lock_downgrade+0x6e0/0x6e0 [ 373.622347][ T3653] ? hci_event_packet+0x425/0xfd0 [ 373.627562][ T3653] hci_conn_add_sysfs+0x9b/0x1b0 [ 373.632875][ T3653] hci_le_cis_estabilished_evt+0x57c/0xae0 [ 373.637309][ T3653] ? hci_cc_le_set_random_addr+0x290/0x290 [ 373.642607][ T3653] ? wait_for_completion_io_timeout+0x20/0x20 [ 373.648086][ T3653] hci_le_meta_evt+0x2b8/0x510 [ 373.653380][ T3653] ? hci_cc_le_set_random_addr+0x290/0x290 [ 373.657811][ T3653] hci_event_packet+0x63d/0xfd0 [ 373.662315][ T3653] ? hci_conn_drop+0x2f0/0x2f0 [ 373.667429][ T3653] ? hci_cs_create_conn+0x3a0/0x3a0 [ 373.673672][ T3653] ? kcov_remote_start+0x156/0x7a0 [ 373.679692][ T3653] hci_rx_work+0xae7/0x1230 [ 373.684553][ T3653] process_one_work+0x991/0x1610 [ 373.689590][ T3653] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 373.694534][ T3653] ? rwlock_bug.part.0+0x90/0x90 [ 373.700335][ T3653] ? _raw_spin_lock_irq+0x41/0x50 [ 373.706144][ T3653] worker_thread+0x665/0x1080 [ 373.712224][ T3653] ? process_one_work+0x1610/0x1610 [ 373.716992][ T3653] kthread+0x2e4/0x3a0 [ 373.722791][ T3653] ? kthread_complete_and_exit+0x40/0x40 [ 373.727646][ T3653] ret_from_fork+0x1f/0x30 [ 373.732425][ T3653] [ 373.737611][ T3655] CPU: 1 PID: 3655 Comm: kworker/u5:8 Not tainted 6.0.0-rc7-syzkaller-00162-g5a77386984b5 #0 [ 373.774323][ T3653] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 373.774353][ T3653] Bluetooth: hci1: failed to register connection device [ 373.774467][ T3653] Bluetooth: hci1: unexpected event 0x35 length: 3 < 6 [ 373.832019][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 373.842092][ T3655] Workqueue: hci5 hci_error_reset [ 373.847143][ T3655] Call Trace: [ 373.850429][ T3655] [ 373.853374][ T3655] dump_stack_lvl+0xcd/0x134 [ 373.857998][ T3655] panic+0x2c8/0x627 [ 373.861947][ T3655] ? panic_print_sys_info.part.0+0x10b/0x10b [ 373.867974][ T3655] ? __list_del_entry_valid+0xe8/0x110 [ 373.873459][ T3655] end_report.part.0+0x3f/0x7c [ 373.878243][ T3655] kasan_report.cold+0xa/0xf [ 373.882857][ T3655] ? __list_del_entry_valid+0xe8/0x110 [ 373.888322][ T3655] __list_del_entry_valid+0xe8/0x110 [ 373.893615][ T3655] klist_release+0x66/0x480 [ 373.898125][ T3655] ? class_create_release+0x70/0x70 [ 373.903328][ T3655] klist_put+0x151/0x1d0 [ 373.907577][ T3655] device_del+0x46d/0xc80 [ 373.911909][ T3655] ? __device_link_del+0x380/0x380 [ 373.917020][ T3655] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 373.922828][ T3655] hci_conn_del_sysfs+0xdc/0x180 [ 373.927768][ T3655] hci_conn_cleanup+0x315/0x7b0 [ 373.932620][ T3655] hci_conn_del+0x29b/0x790 [ 373.937121][ T3655] hci_conn_hash_flush+0x197/0x260 [ 373.942237][ T3655] hci_dev_close_sync+0x55d/0x1130 [ 373.947352][ T3655] ? hci_dev_open_sync+0x2190/0x2190 [ 373.952638][ T3655] ? lock_downgrade+0x6e0/0x6e0 [ 373.957486][ T3655] ? do_raw_spin_lock+0x120/0x2a0 [ 373.962511][ T3655] hci_dev_do_close+0x2d/0x70 [ 373.967194][ T3655] hci_error_reset+0x96/0x130 [ 373.971875][ T3655] process_one_work+0x991/0x1610 [ 373.976821][ T3655] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 373.982195][ T3655] ? rwlock_bug.part.0+0x90/0x90 [ 373.987131][ T3655] ? _raw_spin_lock_irq+0x41/0x50 [ 373.992164][ T3655] worker_thread+0x665/0x1080 [ 373.996845][ T3655] ? __kthread_parkme+0x15f/0x220 [ 374.001870][ T3655] ? process_one_work+0x1610/0x1610 [ 374.007071][ T3655] kthread+0x2e4/0x3a0 [ 374.011135][ T3655] ? kthread_complete_and_exit+0x40/0x40 [ 374.016768][ T3655] ret_from_fork+0x1f/0x30 [ 374.021192][ T3655] [ 374.024453][ T3655] Kernel Offset: disabled [ 374.028771][ T3655] Rebooting in 86400 seconds..