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"}}, @algo_auth_trunc={0x10a, 0x14, {{'sha384-arm64\x00'}, 0x5f0, 0x40, "1b3e11f420a65f7bf918938f0bc24177d367cb30110ff9dcd085c33a66389b09b627a0066cd648d8a52a6253e95e43aaafe5d53c90d428a98ef84447d37e122de99f12d598d2e2f6483c2322c48de7713ff8de4f2c3f27872ffb14f2b390039dfcabc233b90496e290aa85a19820fc4731b28254afff6699eebd6993790b59bb7a08ad50f6de3af596d38865d91865d5330d17ca85414802f4db24c997918c5629790eccb38e51452aa337d1ebc001309a0a1568fe626785ae3cfe341e15"}}]}, 0x1170}, 0x1, 0x0, 0x0, 0x20000800}, 0x85) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x158, 0x3, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0xa}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x3f, 0x0, 0x57, 0x40}}]}}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:07 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x8085) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) 19:55:07 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) 19:55:07 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xdf) 19:55:07 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00ffffffffffdac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea79171b2fc112d6a45debf0f4e995409a3e3abe75a15ccd370ab6fad941e87c5c280c91cb5a95a370413035c54eb1775a45f67e2d6b3dea907b573c331198e0dc95425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c070000000000000033ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5a8c025b297cf2d4a30774ab8f906bc20078661"], 0x102) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="e2f7000d2c31cef3f01dc6bab56441f99b"], 0x11) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) 19:55:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') linkat(0xffffffffffffffff, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1400) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) [ 409.338256][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 409.346088][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 344 19:55:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a3775d75d8f54eb1775a45f67e2d6b3dea907b1cfc335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf50100dd66855476c14b81e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30e71bba10ce3378030caaeba7bde22a"], 0x102) 19:55:08 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xdf) 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x4}}, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000000100)=@flushpolicy={0x1170, 0x1d, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@mark={0xc, 0x15, {0x35075c, 0xd237}}, @algo_auth={0x1048, 0x1, {{'xxhash64\x00'}, 0x8000, "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"}}, @algo_auth_trunc={0x10a, 0x14, {{'sha384-arm64\x00'}, 0x5f0, 0x40, "1b3e11f420a65f7bf918938f0bc24177d367cb30110ff9dcd085c33a66389b09b627a0066cd648d8a52a6253e95e43aaafe5d53c90d428a98ef84447d37e122de99f12d598d2e2f6483c2322c48de7713ff8de4f2c3f27872ffb14f2b390039dfcabc233b90496e290aa85a19820fc4731b28254afff6699eebd6993790b59bb7a08ad50f6de3af596d38865d91865d5330d17ca85414802f4db24c997918c5629790eccb38e51452aa337d1ebc001309a0a1568fe626785ae3cfe341e15"}}]}, 0x1170}, 0x1, 0x0, 0x0, 0x20000800}, 0x85) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x158, 0x3, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0xa}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x3f, 0x0, 0x57, 0x40}}]}}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x4}}, 0x9) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000000100)=@flushpolicy={0x1170, 0x1d, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@mark={0xc, 0x15, {0x35075c, 0xd237}}, @algo_auth={0x1048, 0x1, {{'xxhash64\x00'}, 0x8000, "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"}}, @algo_auth_trunc={0x10a, 0x14, {{'sha384-arm64\x00'}, 0x5f0, 0x40, "1b3e11f420a65f7bf918938f0bc24177d367cb30110ff9dcd085c33a66389b09b627a0066cd648d8a52a6253e95e43aaafe5d53c90d428a98ef84447d37e122de99f12d598d2e2f6483c2322c48de7713ff8de4f2c3f27872ffb14f2b390039dfcabc233b90496e290aa85a19820fc4731b28254afff6699eebd6993790b59bb7a08ad50f6de3af596d38865d91865d5330d17ca85414802f4db24c997918c5629790eccb38e51452aa337d1ebc001309a0a1568fe626785ae3cfe341e15"}}]}, 0x1170}, 0x1, 0x0, 0x0, 0x20000800}, 0x85) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x158, 0x3, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0xa}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x3f, 0x0, 0x57, 0x40}}]}}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) 19:55:08 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) 19:55:08 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x8085) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) 19:55:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) 19:55:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') linkat(0xffffffffffffffff, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1400) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) linkat(0xffffffffffffffff, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1400) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) (async) 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x4}}, 0x9) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000000100)=@flushpolicy={0x1170, 0x1d, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@mark={0xc, 0x15, {0x35075c, 0xd237}}, @algo_auth={0x1048, 0x1, {{'xxhash64\x00'}, 0x8000, "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"}}, @algo_auth_trunc={0x10a, 0x14, {{'sha384-arm64\x00'}, 0x5f0, 0x40, "1b3e11f420a65f7bf918938f0bc24177d367cb30110ff9dcd085c33a66389b09b627a0066cd648d8a52a6253e95e43aaafe5d53c90d428a98ef84447d37e122de99f12d598d2e2f6483c2322c48de7713ff8de4f2c3f27872ffb14f2b390039dfcabc233b90496e290aa85a19820fc4731b28254afff6699eebd6993790b59bb7a08ad50f6de3af596d38865d91865d5330d17ca85414802f4db24c997918c5629790eccb38e51452aa337d1ebc001309a0a1568fe626785ae3cfe341e15"}}]}, 0x1170}, 0x1, 0x0, 0x0, 0x20000800}, 0x85) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x158, 0x3, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0xa}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x3f, 0x0, 0x57, 0x40}}]}}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:08 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) (async) 19:55:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a3775d75d8f54eb1775a45f67e2d6b3dea907b1cfc335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf50100dd66855476c14b81e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30e71bba10ce3378030caaeba7bde22a"], 0x102) 19:55:08 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) 19:55:08 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x8085) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) [ 409.480688][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 409.488548][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 344 [ 409.496221][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 409.507482][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 344 19:55:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) linkat(0xffffffffffffffff, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1400) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) 19:55:08 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) 19:55:08 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xfffffffffffffd85}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x80f}}}}, 0xb) 19:55:08 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) [ 409.583967][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 409.591835][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 344 19:55:08 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffffffdd0000003088870000"], 0x20) 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) 19:55:08 executing program 4: preadv2(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=""/215, 0xd7}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x8, 0x80000001, 0x0, 0x10) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x5c9, 0x7, 0x3, 0x2}) syz_emit_vhci(&(0x7f0000001600)=ANY=[@ANYBLOB="121002000400000079464cefdcb628f34dfecde807c7c86b656657c22b96d679af2345d9ba37c1ca8db16258318d3f290a"], 0x11) 19:55:08 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0407ff00ffffeffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b32001000000000000099c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2000000000000000035198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395da7e0f8b981eafe3e6034f30965f7cd5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df9031ae8066b5b48cbb663c55ed6299d7cdcbdf94cf2ad3"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xfffffffffffffd85}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x80f}}}}, 0xb) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xfffffffffffffd85}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x80f}}}}, 0xb) (async) 19:55:08 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) [ 409.676794][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 409.687403][ T5118] Bluetooth: hci4: command 0x0409 tx timeout 19:55:08 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffffffdd0000003088870000"], 0x20) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffffffdd0000003088870000"], 0x20) (async) 19:55:08 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xbd) 19:55:08 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xbd) 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) [ 409.736498][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8004a}, 0x40) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{r2, r3+60000000}}, &(0x7f0000000200)) 19:55:08 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xbd) 19:55:08 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xfffffffffffffd85}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0x80f}}}}, 0xb) 19:55:08 executing program 4: preadv2(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=""/215, 0xd7}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x8, 0x80000001, 0x0, 0x10) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x5c9, 0x7, 0x3, 0x2}) syz_emit_vhci(&(0x7f0000001600)=ANY=[@ANYBLOB="121002000400000079464cefdcb628f34dfecde807c7c86b656657c22b96d679af2345d9ba37c1ca8db16258318d3f290a"], 0x11) preadv2(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=""/215, 0xd7}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x8, 0x80000001, 0x0, 0x10) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x5c9, 0x7, 0x3, 0x2}) (async) syz_emit_vhci(&(0x7f0000001600)=ANY=[@ANYBLOB="121002000400000079464cefdcb628f34dfecde807c7c86b656657c22b96d679af2345d9ba37c1ca8db16258318d3f290a"], 0x11) (async) [ 409.824705][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 409.833625][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 409.851732][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "051670d4d8b2dffa22d45fc3cfcccfeedc58c3ac022687abc36070233087c99fe451b585c3e478e39f8cdfb11419fd3b24dd5e5e19744b206acd0c4c6d6e4c2b08604617bce37c9d399f967a56708b975d46a4eef35be46617fd2e57c24070e3710858e692b76e8fce792cb15401820a21fa19d54450896f3af8a7d9670ef4f48aef702b8779d07207e814663dc3ed6e42dc558932be3446014d23833a959eaef45134f5b1cb759813c1ae6dbf7d9347bc41554856a9f44b3d29d393c52c5e00df4dd98a26e54ede89fffbbf390e40ca269c8342a6a38c228d9e052bbb6100c493a3f0934d412a7fd71339e333e68df980ea972688fb81fad5b5c381027e9f437cd360d3501b264efb5b99cb6c7bbc3bef1a8d606c8d2e1bb3fce570f59039a0d8542c55449883671d46b053fe8cbe3da0f63e691c11b0fd8b674ee1ed2410e7c2f6b57f29aaa2d7a6c38a7914caedf017db7445e04295fa8e54ebf9ffaccd68b9a812b005eae40f217fe5833e6a63b57219c77425a3ac8e362df525cae7918ecc6371ed3c10819b7e34d5775f2a485b2d26f9265227803d484fc0b991a016d6cd8687056f08fac41b29f7b27b7edd712d077f1d95c4a10d6bf5b7f6aae29f57d5a3b2954134f9208b64b0038fd91f1291e3ead636e81907e31fe18b69beafd9ea22e3b5f529f73b21f338f3e924f579cfed5e6a9cfa91205d1209d0b7bb4c6611e5bfca339fc6063c1eb7b85c274836d40829894c5ee7d9dd4ca0c46fa44ca8fcf04b276b81f52c7d1b8293adf3c458b5cd2731a1200500f0a1e797a9da016eebab7e4c6a155880001b69b8ecd7b00cb6442ab813ed534d4994f062ae0a32f30687b04cf8bf3cb7ceee17bbc6cf9aa9c07d5415d68c96a77092a2150b08094706279e8b599d864b1a15df093fc823b66b2bc28b628730ec698b8043e5ac5551bb733eb60acec4b9dcdeca162a1d37741d72757a60546f11c24a80b9f2ec624e7a86ed12d503546f8697a70bf82cedc152ef78f7e6cba43419323e171183cea902010e7250065a21f0f7861f4e562df2b540ac16732970f9894576728987d3e9cb04e210351193a5e10c80c84d4a0308a8672e157327eb04300fb17de4bb272783ae934f6f9b3c71d8d80cdad2af6e73458033f2cbf7a382cb83463df5adb858fca5607472cba0dd1429851a7d36d3825882d10748eb0f2e36c39c6c378b1a2ce016177bd4393b4ea9e2605dde6a46210d93e81cd926daf0b4b35f0c4c006f73feedd398ad5af4b4ee20e5a0a2c945aa3e4591bb9c099b12b369f7cc2e50b0e6ac21aaec36045ed7aff405940dd39c6d2d2fb91ef89fc8530dc8d8c9c3f785f11c2f227a6545649090a7cdbf2355a1d46741fb12b581928a9d7bbd72f389bab924c4ddb50767662368eea99d425adffbd0fb286199d043a371b1b018bf652dfb793d461b1e6eee8b2280f7f2f166f801f14a2277d4d71eff9a99022aabeca1d9ac5bfc704a6d487669e013415604cdb80a6e85c93888a31f91ba637598828959962835281bc332c57603772f61ea2787455b10fd6e04ecfeef1df93cd6c99de567184d05a70ef14b4ced7cf9937fc2ef3509a064d9bb13189b4aa7cf012a13431259bb539ecf53580b36470c0010592540251e74b9b25ae455d6b78e7ba4383155bd92fbd0f48a9b2e1c22e3a3df5d662ad6dabed98951a86ca057b39f40c7a2f5dd7cb2de3456974225849e995ea0466e7045f906fbecd42233bdd9c72d9da8fb05cc54b03ccdada07c85fd3a163f26e4e64f3f3d3854d0aee8318f4998ac9b6f0eb1322f5e8a20813bc8db35f7d94a6deeb7a7708d7fb0d5a33aeade53b47388df5cf77b2847a59642a4fb5798adf3c92552e23beea161a9a7f825c525adcfba19e0d5d092aa931718dab1ccc6753f99423fa9528bbcbc0bed7500b635d4f38c276b460e02a9ce0a70e64686dad1454d962dc12d9213225bfe6a61b4baa7469dc8590fff162decf1a8247a7f709e58c3464b874a41521edc52733dbab86855cba199904059906e0edaf135c54e2690b427c4dae6e022c05fca89596fbd0c3d7d4151aef815d8fb8bccfd351ee661d436ddfa56d9b9250a4ba132d09f08d29e334208f253fbafdbf507d460a20dd7dbee8dc0695e4b4f80169749b34deafcec478fd286449c1004c4b37d3f63e605d9cb292da9d1f8b297e85a058cd2bbe8f57a90681cecd41e1058a3625d3f80271bb583f212790db3e42054b498851251d2b8a6da594aa212095052453a7fa4207ecbe27a7aa614361b45c7319917f9c1ee7ce05e5d174016df3c03e06666af36c53dae9f401d2d0144670d9b913228b37da04906782e75097c026f3fc1658273b2b423919198a336bfa7541dbcfd08c93481f96e664b7d07c8215381d527e240aeb1db9e08952c57808c0717c7fe62348ea9012c6be9d82c6faddbc41cd931ac41471da62b6a0b2d7445329bfe603129742ef13098252c11314092ae32e0f82d12c351b6c1a5aedf05b1ad964f04da3e2d988089915de8e77d9d387bec93ab5127c2214eac0f96447ca41c661d7f2a88fab747db0bde2890f4bc6cf99eeb73015765bf896f18d9a94143157c2a8bdc28232182d8a24f47bb5361a651eeafc53836b908e618929e72c0f282e28fd22b3f908d7d15aad83034b8560da26690f0442fdd3387cfeb97f1ec8276edbfb91b22bea49aa61b6964d298860c08f229e01c7da2f22c4167d0d7b223fb9404e612522dcc94f8612442374dd78106ea8372476377c0a3c0f2083912b69753380afcd5cdd61d21ad0a3efa61f0724d9ea2cfa78125d7c359fefcfa876d183c79d780784a09a02da64197f71f1c69ac1a6efe89edba79797bda774bed83b4cf68eb494df8b45de2f61b351deee0a2e25b9d2b6bf2555c5a707180a846482691eaa99fe8cf6914d046c1e891cf48a1518403e1ffbfd7b19db5c40433db95ee3c98a7bd1234996eb2dd6ac8b49e4817761f3763b716b0e2eb37ee9ec8d1ebaa599fd9acb180c68c8e2bb4a2a337736fc14675d8050ab9ba27e7a38ac81c125c99752279e5bfbf455073a30aa7498fe4d42c3fe136d74296ac20291c49f3ed3ba48e047bb3d4247d4c76e479d92805693514a807911d10460f9f755a5d7c15081b1de44461c343d61eba0109e7751596febae841c1137c765d3eda0c82616e8b0380c6564d48cb2b4ff2cf0878fdf7acd9a1fb4a332c6d9b32c54978569e743a26a92338330be629e0c4f8e13f6d41058af74b2bf8ffd45265772272b5a9f5f76ae0bdd2ba14f481c843489df056220c436b1c56e02fed0f403a51ef5dd602e4a0b1b62c562db0084ac2e2d635746d43211d90d4cfd5855030578c4ace664cdf677bfa76914f963973481fd61b65096697ec4b2ad374a215389ec1f91e4753da8c4071fed3bc5295c6060f337f85890bfa84e823d14b7f49b4694c4c4beb5f0c0e60086704585a1b39fc67e46fab993f2a53533db26cdc0a95df15563accaae8f80840e8981e9a26f0e7cfa912b48ab86fab0e28743ef7caa50951f2f569ec0255b8d50a0066ae2291c6a2ada5096e777e2d61e3d3f03bf76db7c2a7ba9cf88bb1c0b44d78ffc166fd570880c52e207a24a91c6a9baacb8aead3cc31f3f604953d95f321f9ce1cf50070b51dd4a61b43960cb06553dfecb8dbc73f43255d6e5e851aec95a1e9d01ab581d2490e793faeff0eb03f1a10a72a8324392dc4b8283dac0c67decd843368464b8ca938af082f3a05a66668e6acf1a9e4c9c81d648c9b51418b33f93c88725bf98653c967e9a45f902270bdab6def4b8b0a430e1473c5a3a142fa576aba31271f3201eb9403d52b46c3c07eb43a4552289a30b55b56f3de03ff05bd79f86b364a81b88eae3b6b2e6ee145f352d9c10d947297c62510232d9125f4e83384483e4913f93c854ec12f94990ce242fd5b43bbe3eca09244120582a914b8f76d876e51319ccfc0052ea059c8456b8946d00572b166fcda373b9809ee7e2ede81e944ebdcb3a7088c035026d6b53475447933da7c387f43311fc45c62fead1f0b3baaabcfb7411c0a48ff81651fc10f8503e0fef929e882b466582247e34b013a88ee7c05799b05beb334f73860dda1d698df69be42522da6730ff8d7617b5d687434f282b91e3f71cf066e986c63e74cc8adade8e32acb4b895615bd789e6eb3b7b22d623fb77c5895e3347612d0ddbbea88b369016737736a5026bc541015eead8e72feb695bfc1ede0292ed3795f8f3009f843a000e288c8ac9f6cb40145e8a0c71dc7f11c4f300ba816b4f640677d39b28a965fe49b915d2138fc9d643c5e3757aa9f53973ad16e6659c05c819502036684a86b6879a8fe36e042606305af37b8d51cc41a8692a6e7a73162bd25a927f396ded21d940be2bb2530d71ce297d640d6882141edbaaf4d254035eee81679f36c528a5439a8bb09b4cfde1e8375825ae87fbf5708fdd90f748ce28e168b245bbaadf86fa09bfb482819312ef997d708958792e96e713c7fc05e2b416715443b7436a8178d9df7eaf20339563401014a7ff6f65d697a4a980655d789469837dbec5b26f8e0ba04a24b12449603450136155ca2b07066ae6ff78c253bbc069892573b1b1a225b122e6c5d280f02d2ea2a904b0d07ea87e858ce102a5f6f35332bd260d6069015d4adea100c61fa98a458e58b81f3e871bca3e5f87a529f82b15ff1da55aeed2db072655e7dd67900384de83d3719a4e5d76c172535b23dc7bdcb2a6de3ea2baabf380c9b1a96416ee770078f1a576b553a765532131a193dda9223c329b386ffc032f73af82d5b7084cb2408224a59684915d1f93a6764547bf50c4e7c998e4395e2fdf3bac10f00cf10386e5501fca3eb211fde4da67373cab285ce06d61a8e3599e2be0b4a4da3bfef0b2c77c522d69d784f12c448db37e10044a9df7911cfd26ddfeaa0d8c3ce86b3e166f62cb693effcdaabefe56c9b256bf558afd057e376a646580782a3313b8b15115a5a8bf26280c6d8c10f5bcb7f97127475d85373ddfd1647ae981227e7618e1218535f26f90824fce1e91ce52157c2e6f3b96652c2e3603a088f414c10245ea770156fdb0ddaa139d7dd65aa0a3091883d19a26c9276d8cc277a9bdd8fdb921c89331a3753d5ed03db81137b2072066674b6e8c9777273f297507850958532775b6385f46619f254bb8e2f5ed708748f709cf2579f2957325d40179c0c5012d169032b352a3d1460b0e06a37f466ee0a8bea0dde5f1152f6fa303e4ab3a13aa70ff390cadc5bda18adf460c6962c429580b16ddddf51472e3148be5d91c97f0301e776ebdf47f9c279b763e82a4161dad696c7b2db17150cd9e97c43a4bbf288411d4194633704729a6e98e76dafc2bd29e7f882dd5584002ef5115d15ff8e09d1df529d0ce452edd0f4314902d4bcb40af80d64c8441b6892e42f1e1c36b36597642014c1b96f8575c596d9df685f7ac19370820a7a37c948d9af50d59a7b9e8f27a08ac56187022b96b0ce08613c69231a48efe53ee6f965d61ab7d406fe88595c27a56c5c6bee4436d329b08660882548913567cc78702b358e68acbf45aba81481cac4b74f8de59a07d56737bdf5bb95adeb6e37d82ef6f24e52a7fbf60961f7404855b4436610146e19dcd765635a95f351fdd495d3450965e592ba3464dfda1ab7f3b14b8295969c3a529d18fc9d902b0ccddd3ab48389b733f862afb7dbd23ab3d4faf663b34d5c47f62989f95e5cac772d45f610bce712"}, 0x1004) (async) 19:55:08 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffffffdd0000003088870000"], 0x20) 19:55:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r3], 0x1) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_newaddr={0xb4, 0x14, 0x10, 0x70bd2a, 0x25dfdbfb, {0xa, 0x18, 0x0, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7f, 0x3, 0xfff}}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x8, 0x2a, 0x7ff}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1000}, @IFA_LOCAL={0x14, 0x2, @private1}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x6, 0xffffff5b, 0x81}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x44000800) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) shutdown(r5, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3b7abf13, 0x77}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x40080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX=r7, @ANYRES64=r2], 0xdf) [ 409.878907][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:08 executing program 2: socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8004a}, 0x40) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{r2, r3+60000000}}, &(0x7f0000000200)) (async) timer_settime(r1, 0x0, &(0x7f00000001c0)={{r2, r3+60000000}}, &(0x7f0000000200)) 19:55:08 executing program 4: preadv2(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=""/215, 0xd7}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x8, 0x80000001, 0x0, 0x10) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x5c9, 0x7, 0x3, 0x2}) (async, rerun: 64) syz_emit_vhci(&(0x7f0000001600)=ANY=[@ANYBLOB="121002000400000079464cefdcb628f34dfecde807c7c86b656657c22b96d679af2345d9ba37c1ca8db16258318d3f290a"], 0x11) (rerun: 64) 19:55:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') fcntl$dupfd(r0, 0x406, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', 0x58f880, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r2, &(0x7f0000000240), 0x1, 0x40000022, &(0x7f0000000280)={0x0, 0x989680}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) acct(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x800) [ 409.953218][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r3], 0x1) (async) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_newaddr={0xb4, 0x14, 0x10, 0x70bd2a, 0x25dfdbfb, {0xa, 0x18, 0x0, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7f, 0x3, 0xfff}}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x8, 0x2a, 0x7ff}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1000}, @IFA_LOCAL={0x14, 0x2, @private1}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x6, 0xffffff5b, 0x81}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x44000800) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) shutdown(r5, 0x0) (async, rerun: 64) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (rerun: 64) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) (async, rerun: 32) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3b7abf13, 0x77}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x40080) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX=r7, @ANYRES64=r2], 0xdf) 19:55:08 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xce}, @l2cap_cid_signaling={{0xca}, [@l2cap_move_chan_rsp={{0xf, 0x40, 0x4}, {0x5, 0x1}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0xd44}}, @l2cap_conf_rsp={{0x5, 0x8, 0x2e}, {0x8, 0x8000, 0x200, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x50, 0x0, 0xfff9, 0x4, 0x0, 0x762}}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0xd402, 0x7fff, 0x5, 0x3}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x81}}, @l2cap_info_rsp={{0xb, 0x6, 0x71}, {0x3, 0x6, "6fc5ad626bbf49c0b7bbc8a6dbb78865039f0e4ec0c6e08a596af028516174673dee064aa500d231b9e04be3a8c2ad32a98b646e81ffc9c55649e13dea94eec0ab9ae76c3ba1e9b099c427f1f094f2970fe930d098ecef2789d2085da3051daea884190d5cebf0299de7435b98"}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0xfffe}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x6, 0x40, 0x26}}]}}, 0xd3) [ 410.011155][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.018897][ T5127] Bluetooth: hci2: command 0x0409 tx timeout [ 410.025410][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8004a}, 0x40) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{r2, r3+60000000}}, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8004a}, 0x40) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) timer_settime(r1, 0x0, &(0x7f00000001c0)={{r2, r3+60000000}}, &(0x7f0000000200)) (async) 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xce}, @l2cap_cid_signaling={{0xca}, [@l2cap_move_chan_rsp={{0xf, 0x40, 0x4}, {0x5, 0x1}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0xd44}}, @l2cap_conf_rsp={{0x5, 0x8, 0x2e}, {0x8, 0x8000, 0x200, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x50, 0x0, 0xfff9, 0x4, 0x0, 0x762}}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0xd402, 0x7fff, 0x5, 0x3}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x81}}, @l2cap_info_rsp={{0xb, 0x6, 0x71}, {0x3, 0x6, "6fc5ad626bbf49c0b7bbc8a6dbb78865039f0e4ec0c6e08a596af028516174673dee064aa500d231b9e04be3a8c2ad32a98b646e81ffc9c55649e13dea94eec0ab9ae76c3ba1e9b099c427f1f094f2970fe930d098ecef2789d2085da3051daea884190d5cebf0299de7435b98"}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0xfffe}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x6, 0x40, 0x26}}]}}, 0xd3) [ 410.055276][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.065702][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xce}, @l2cap_cid_signaling={{0xca}, [@l2cap_move_chan_rsp={{0xf, 0x40, 0x4}, {0x5, 0x1}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0xd44}}, @l2cap_conf_rsp={{0x5, 0x8, 0x2e}, {0x8, 0x8000, 0x200, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x50, 0x0, 0xfff9, 0x4, 0x0, 0x762}}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0xd402, 0x7fff, 0x5, 0x3}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x81}}, @l2cap_info_rsp={{0xb, 0x6, 0x71}, {0x3, 0x6, "6fc5ad626bbf49c0b7bbc8a6dbb78865039f0e4ec0c6e08a596af028516174673dee064aa500d231b9e04be3a8c2ad32a98b646e81ffc9c55649e13dea94eec0ab9ae76c3ba1e9b099c427f1f094f2970fe930d098ecef2789d2085da3051daea884190d5cebf0299de7435b98"}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0xfffe}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x6, 0x40, 0x26}}]}}, 0xd3) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xce}, @l2cap_cid_signaling={{0xca}, [@l2cap_move_chan_rsp={{0xf, 0x40, 0x4}, {0x5, 0x1}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0xd44}}, @l2cap_conf_rsp={{0x5, 0x8, 0x2e}, {0x8, 0x8000, 0x200, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x50, 0x0, 0xfff9, 0x4, 0x0, 0x762}}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0xd402, 0x7fff, 0x5, 0x3}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x81}}, @l2cap_info_rsp={{0xb, 0x6, 0x71}, {0x3, 0x6, "6fc5ad626bbf49c0b7bbc8a6dbb78865039f0e4ec0c6e08a596af028516174673dee064aa500d231b9e04be3a8c2ad32a98b646e81ffc9c55649e13dea94eec0ab9ae76c3ba1e9b099c427f1f094f2970fe930d098ecef2789d2085da3051daea884190d5cebf0299de7435b98"}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0xfffe}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x6, 0x40, 0x26}}]}}, 0xd3) (async) [ 410.104414][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.115894][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.123926][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:08 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 19:55:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) fcntl$dupfd(r0, 0x406, r0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', 0x58f880, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) recvmmsg(r2, &(0x7f0000000240), 0x1, 0x40000022, &(0x7f0000000280)={0x0, 0x989680}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) acct(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x800) [ 410.153709][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) flock(r0, 0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000ce2000000e4040000001007"], 0x11) 19:55:08 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x8, 0x2}, {0x4}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 410.205349][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:08 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa00000000655138b18e70c30000ffffffffffff00000030"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r3], 0x1) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_newaddr={0xb4, 0x14, 0x10, 0x70bd2a, 0x25dfdbfb, {0xa, 0x18, 0x0, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x7f, 0x3, 0xfff}}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x8, 0x2a, 0x7ff}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1000}, @IFA_LOCAL={0x14, 0x2, @private1}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x6, 0xffffff5b, 0x81}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x44000800) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) shutdown(r5, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3b7abf13, 0x77}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x40080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESDEC=r8, @ANYRESHEX=r7, @ANYRES64=r2], 0xdf) [ 410.249760][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.258901][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 410.268732][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.276459][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.284949][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x98, 0x12}, {0x8000, 0x8000, 0x4, 0xa28, [0x6, 0xc105, 0x0, 0x1, 0xb0]}}}}, 0x1f) 19:55:08 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x4001010, r0, 0xd689000) [ 410.317400][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa00000000655138b18e70c30000ffffffffffff00000030"], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) flock(r0, 0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000ce2000000e4040000001007"], 0x11) 19:55:09 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x98, 0x12}, {0x8000, 0x8000, 0x4, 0xa28, [0x6, 0xc105, 0x0, 0x1, 0xb0]}}}}, 0x1f) 19:55:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) fcntl$dupfd(r0, 0x406, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', 0x58f880, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='./file0\x00') (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) recvmmsg(r2, &(0x7f0000000240), 0x1, 0x40000022, &(0x7f0000000280)={0x0, 0x989680}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) acct(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x800) 19:55:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa00000000655138b18e70c30000ffffffffffff00000030"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa00000000655138b18e70c30000ffffffffffff00000030"], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) [ 410.360527][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:09 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x4001010, r0, 0xd689000) (rerun: 32) 19:55:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x7, 0x200}}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x5, 0xc9, @any, 0x0, 0x6}}}, 0xe) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x80}, "714ae929630709e38b13d3ffdec75672bb33744b42f71984deb2aedd09182a854c65373be480516ffe5a6902694b58eca4c6a2ba58a817458d02e343f745aa30c7e43caf88adfdc0e08f20d21721d643c94fee2fdccd02ff4174a30dcf5a78652bbf9571d1652c558ebe53170aae04dd2dabd9125c42d8e9c75e764570acc6f4"}, 0x84) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc8, 0x0, 0x8}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x4e}, {0x40, "fe5509eda6281801db1e6b2447add76a25200d1cb19e5c536a311fd9fdea38cd9cdfc868144a29ffeb33de467d7917707909fbfde1b6a9b99af5b5543045eb165abce64e0820354aaab90e24"}}}, 0x51) [ 410.448454][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.475731][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:09 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x98, 0x12}, {0x8000, 0x8000, 0x4, 0xa28, [0x6, 0xc105, 0x0, 0x1, 0xb0]}}}}, 0x1f) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x98, 0x12}, {0x8000, 0x8000, 0x4, 0xa28, [0x6, 0xc105, 0x0, 0x1, 0xb0]}}}}, 0x1f) (async) 19:55:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) flock(r0, 0x9) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000ce2000000e4040000001007"], 0x11) (rerun: 32) 19:55:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000200)=""/156, 0x9c}, {&(0x7f00000002c0)}], 0x5}, 0x7}], 0x1, 0x2, &(0x7f0000000400)={r1, r2+60000000}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) [ 410.494814][ T5118] Bluetooth: hci0: command 0x0409 tx timeout 19:55:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000200)=""/156, 0x9c}, {&(0x7f00000002c0)}], 0x5}, 0x7}], 0x1, 0x2, &(0x7f0000000400)={r1, r2+60000000}) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) [ 410.566813][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.577395][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.585086][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.593389][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.595349][ T5127] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 410.601097][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:09 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0xff, 0xc9, 0x2, 0xc5, 0x1}}}, 0xb) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x2}}}, 0x7) [ 410.601139][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.601177][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.601216][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.601254][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.601293][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.609917][ T5127] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:09 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x4, 0xc9, 0x0, 0x7, 0x20, 0xffe0}}}, 0xe) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x7e7cd8cab9508e64}, 0x2) 19:55:09 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x5, 0xc9}}}, 0x5) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x20, 0x8}, {0x5, 0xfffe, 0xb592, 0x1}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000001100)=@HCI_VENDOR_PKT, 0x2) [ 410.616690][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.643187][ T5127] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 410.648978][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.685932][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.693669][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.701441][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.709181][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x7, 0x200}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x5, 0xc9, @any, 0x0, 0x6}}}, 0xe) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x80}, "714ae929630709e38b13d3ffdec75672bb33744b42f71984deb2aedd09182a854c65373be480516ffe5a6902694b58eca4c6a2ba58a817458d02e343f745aa30c7e43caf88adfdc0e08f20d21721d643c94fee2fdccd02ff4174a30dcf5a78652bbf9571d1652c558ebe53170aae04dd2dabd9125c42d8e9c75e764570acc6f4"}, 0x84) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc8, 0x0, 0x8}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x4e}, {0x40, "fe5509eda6281801db1e6b2447add76a25200d1cb19e5c536a311fd9fdea38cd9cdfc868144a29ffeb33de467d7917707909fbfde1b6a9b99af5b5543045eb165abce64e0820354aaab90e24"}}}, 0x51) [ 410.716856][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.719357][ T5127] Bluetooth: Unexpected start frame (len 218) [ 410.724562][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.738307][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.746652][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.754456][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.762184][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.769920][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.784765][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.792494][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.800304][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.808033][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:09 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x4001010, r0, 0xd689000) 19:55:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) clock_gettime(0x0, &(0x7f00000003c0)) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000200)=""/156, 0x9c}, {&(0x7f00000002c0)}], 0x5}, 0x7}], 0x1, 0x2, &(0x7f0000000400)={r1, r2+60000000}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) 19:55:09 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0xff, 0xc9, 0x2, 0xc5, 0x1}}}, 0xb) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x2}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0xff, 0xc9, 0x2, 0xc5, 0x1}}}, 0xb) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x2}}}, 0x7) (async) [ 410.815725][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.823435][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.831192][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.838913][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.846589][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.855225][ T5127] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:09 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0xff, 0xc9, 0x2, 0xc5, 0x1}}}, 0xb) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x2}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x2}}}, 0x7) 19:55:09 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x4, 0xc9, 0x0, 0x7, 0x20, 0xffe0}}}, 0xe) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x7e7cd8cab9508e64}, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x7e7cd8cab9508e64}, 0x2) 19:55:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x7, 0x200}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x5, 0xc9, @any, 0x0, 0x6}}}, 0xe) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x80}, "714ae929630709e38b13d3ffdec75672bb33744b42f71984deb2aedd09182a854c65373be480516ffe5a6902694b58eca4c6a2ba58a817458d02e343f745aa30c7e43caf88adfdc0e08f20d21721d643c94fee2fdccd02ff4174a30dcf5a78652bbf9571d1652c558ebe53170aae04dd2dabd9125c42d8e9c75e764570acc6f4"}, 0x84) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc8, 0x0, 0x8}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x4e}, {0x40, "fe5509eda6281801db1e6b2447add76a25200d1cb19e5c536a311fd9fdea38cd9cdfc868144a29ffeb33de467d7917707909fbfde1b6a9b99af5b5543045eb165abce64e0820354aaab90e24"}}}, 0x51) 19:55:09 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x5, 0xc9}}}, 0x5) (async) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1004) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x20, 0x8}, {0x5, 0xfffe, 0xb592, 0x1}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000001100)=@HCI_VENDOR_PKT, 0x2) [ 410.855244][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 410.886560][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x20, 0x1, 0x41b}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x7, 0xc9, "e01578556aa74484"}}}, 0xe) [ 410.939516][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 410.948827][ T5118] Bluetooth: Unexpected start frame (len 218) 19:55:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "4f2b44c47c3a6ab2e538c00ddc887cb8547d7de04f79dbe2ee3367b637f2070170d11ebfd598337a09fa9d3790d8f0dc809b1af9840f8f166ab25abfc3412940c0bdd53940b1d6ecbb83d4f17633ac363b2d8b957385fd8152e6e10fae9a1134081041598af224c8dc3559e37bc7512941f12eed0ee91e1882b02da6fc4688b56e70439d"}, 0x88) 19:55:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x20, 0x1, 0x41b}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x7, 0xc9, "e01578556aa74484"}}}, 0xe) 19:55:09 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05cedc7e27571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b13376ab6274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x9, @none}}}, 0xa) 19:55:09 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x4, 0xc9, 0x0, 0x7, 0x20, 0xffe0}}}, 0xe) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x7e7cd8cab9508e64}, 0x2) 19:55:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x5d}, @l2cap_cid_signaling={{0x59}, [@l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0xfff8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x5}}, @l2cap_conf_req={{0x4, 0x1c, 0x40}, {0x0, 0x3, [@l2cap_conf_mtu={0x1, 0x2, 0xc4}, @l2cap_conf_mtu={0x1, 0x2, 0x4000}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x0, 0x3, 0xfc, 0x4, 0x800}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x2, 0x40, 0x80, 0x81, 0x8}}]}}, @l2cap_move_chan_req={{0xe, 0xf8, 0x3}, {0x3}}]}}, 0x62) [ 410.988162][ T5118] Bluetooth: hci0: unexpected event for opcode 0x041b [ 411.007567][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:09 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x5, 0xc9}}}, 0x5) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1004) (async) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x1004) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x20, 0x8}, {0x5, 0xfffe, 0xb592, 0x1}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000001100)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000001100)=@HCI_VENDOR_PKT, 0x2) 19:55:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "4f2b44c47c3a6ab2e538c00ddc887cb8547d7de04f79dbe2ee3367b637f2070170d11ebfd598337a09fa9d3790d8f0dc809b1af9840f8f166ab25abfc3412940c0bdd53940b1d6ecbb83d4f17633ac363b2d8b957385fd8152e6e10fae9a1134081041598af224c8dc3559e37bc7512941f12eed0ee91e1882b02da6fc4688b56e70439d"}, 0x88) 19:55:09 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x20, 0x1, 0x41b}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x7, 0xc9, "e01578556aa74484"}}}, 0xe) 19:55:09 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x9, @none}}}, 0xa) [ 411.084506][ T5118] Bluetooth: hci0: unexpected event for opcode 0x041b [ 411.109407][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x5d}, @l2cap_cid_signaling={{0x59}, [@l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0xfff8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x5}}, @l2cap_conf_req={{0x4, 0x1c, 0x40}, {0x0, 0x3, [@l2cap_conf_mtu={0x1, 0x2, 0xc4}, @l2cap_conf_mtu={0x1, 0x2, 0x4000}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x0, 0x3, 0xfc, 0x4, 0x800}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x2, 0x40, 0x80, 0x81, 0x8}}]}}, @l2cap_move_chan_req={{0xe, 0xf8, 0x3}, {0x3}}]}}, 0x62) 19:55:09 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8f00b00080005001600040000000000"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc5}, "ecc879e2dd989a6406bec98ec4635571bb72c25b05dab3e56b98e01113b8b8d0d0e1d24eb682b0d088d6b91cd9a568d7edf7011ede139fa56e1c0c591be126ead666249149932373df3575f06e46cc2577dde617300a2ab2b601ace9ee3a5a89a8e368c923a06a6d5f53b913b6b22408e640d7e904b0cc972f894390c1814594917b88c894eed32b17ac99bfaf62540fe10829e7fb9b419933ea9ee11910856f2a12108bb18e493c523932f2e3db31d9c377995a0182c817a53d15c2421451b3680d05c476"}, 0xc9) [ 411.134049][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:09 executing program 3: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c80024011c0c00080005001600040000df0000fa29b0b5c067d75f625f4d79ee826a9b00ff8903eb261c9a9a0edcbf39c80a0cef954c0cfeb7c440a217c6c1b547973ae27bce05211005b9520fb6cbec725907c6a72a5cdf63045dcedd711846b99a19262b1d94e8875d6e20ec72"], 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3f}, "4d2cbc02f0b26ebf4f25069d5c9f3db55ebe6c1b6250500cce0cbc604482dd99297783c5f531290f34c9178b419b698f5f516716f4bd2308d09b5d51dbf383"}, 0x43) 19:55:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "4f2b44c47c3a6ab2e538c00ddc887cb8547d7de04f79dbe2ee3367b637f2070170d11ebfd598337a09fa9d3790d8f0dc809b1af9840f8f166ab25abfc3412940c0bdd53940b1d6ecbb83d4f17633ac363b2d8b957385fd8152e6e10fae9a1134081041598af224c8dc3559e37bc7512941f12eed0ee91e1882b02da6fc4688b56e70439d"}, 0x88) (rerun: 64) 19:55:09 executing program 1: r0 = socket(0xf, 0x3, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x300}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa0010d2008e70c30000fffffeffffff0000003088870000"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x9}}]}}, 0xf) 19:55:09 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x5d}, @l2cap_cid_signaling={{0x59}, [@l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0xfff8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x5}}, @l2cap_conf_req={{0x4, 0x1c, 0x40}, {0x0, 0x3, [@l2cap_conf_mtu={0x1, 0x2, 0xc4}, @l2cap_conf_mtu={0x1, 0x2, 0x4000}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x0, 0x3, 0xfc, 0x4, 0x800}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x2, 0x40, 0x80, 0x81, 0x8}}]}}, @l2cap_move_chan_req={{0xe, 0xf8, 0x3}, {0x3}}]}}, 0x62) 19:55:09 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x9, @none}}}, 0xa) [ 411.184132][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 411.208580][ T5118] Bluetooth: hci0: unexpected event for opcode 0x041b 19:55:09 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe5}, "7a5d73a53853b64485dea30706aa1032b6684a49c65663b2d94307724b5b86676b57101a061f2de3f954bb6784a18e7025c9fea2b0fd48d314c5c9383038ec8992ef1624ca0495baa278985435dda59efbb551b37352a83be36913a46f522d9c2ae70558f73f52c7cebdba5cc74dbef5c5d4db1be9aebae9e8a1cb6597c5190bf48163b62f4f42b22199cbd2871259e3f542908c266929f797e2d8898391e1879c396686bb5783d38c032c24395a38ae24718db7d4e010a2205dc627db81473406523c3447b11b7609efbe95d6e22f0157827d92036e3c6ba14ef14a3fb8c7932861f5518b"}, 0xe9) 19:55:09 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8f00b00080005001600040000000000"], 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc5}, "ecc879e2dd989a6406bec98ec4635571bb72c25b05dab3e56b98e01113b8b8d0d0e1d24eb682b0d088d6b91cd9a568d7edf7011ede139fa56e1c0c591be126ead666249149932373df3575f06e46cc2577dde617300a2ab2b601ace9ee3a5a89a8e368c923a06a6d5f53b913b6b22408e640d7e904b0cc972f894390c1814594917b88c894eed32b17ac99bfaf62540fe10829e7fb9b419933ea9ee11910856f2a12108bb18e493c523932f2e3db31d9c377995a0182c817a53d15c2421451b3680d05c476"}, 0xc9) [ 411.237058][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 411.276285][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:09 executing program 3: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c80024011c0c00080005001600040000df0000fa29b0b5c067d75f625f4d79ee826a9b00ff8903eb261c9a9a0edcbf39c80a0cef954c0cfeb7c440a217c6c1b547973ae27bce05211005b9520fb6cbec725907c6a72a5cdf63045dcedd711846b99a19262b1d94e8875d6e20ec72"], 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3f}, "4d2cbc02f0b26ebf4f25069d5c9f3db55ebe6c1b6250500cce0cbc604482dd99297783c5f531290f34c9178b419b698f5f516716f4bd2308d09b5d51dbf383"}, 0x43) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c80024011c0c00080005001600040000df0000fa29b0b5c067d75f625f4d79ee826a9b00ff8903eb261c9a9a0edcbf39c80a0cef954c0cfeb7c440a217c6c1b547973ae27bce05211005b9520fb6cbec725907c6a72a5cdf63045dcedd711846b99a19262b1d94e8875d6e20ec72"], 0x11) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3f}, "4d2cbc02f0b26ebf4f25069d5c9f3db55ebe6c1b6250500cce0cbc604482dd99297783c5f531290f34c9178b419b698f5f516716f4bd2308d09b5d51dbf383"}, 0x43) (async) 19:55:09 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r2, r1, r0], 0x3) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000008843e6db183a38c9c808e9850b65152c012bb7eefc5ac6fb9506dcbfdf8f0868e70d480b5a"], 0xdf) 19:55:09 executing program 5: getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f00000001c0)=0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8f00b00080005001600040000000000"], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc5}, "ecc879e2dd989a6406bec98ec4635571bb72c25b05dab3e56b98e01113b8b8d0d0e1d24eb682b0d088d6b91cd9a568d7edf7011ede139fa56e1c0c591be126ead666249149932373df3575f06e46cc2577dde617300a2ab2b601ace9ee3a5a89a8e368c923a06a6d5f53b913b6b22408e640d7e904b0cc972f894390c1814594917b88c894eed32b17ac99bfaf62540fe10829e7fb9b419933ea9ee11910856f2a12108bb18e493c523932f2e3db31d9c377995a0182c817a53d15c2421451b3680d05c476"}, 0xc9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8f00b00080005001600040000000000"], 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc5}, "ecc879e2dd989a6406bec98ec4635571bb72c25b05dab3e56b98e01113b8b8d0d0e1d24eb682b0d088d6b91cd9a568d7edf7011ede139fa56e1c0c591be126ead666249149932373df3575f06e46cc2577dde617300a2ab2b601ace9ee3a5a89a8e368c923a06a6d5f53b913b6b22408e640d7e904b0cc972f894390c1814594917b88c894eed32b17ac99bfaf62540fe10829e7fb9b419933ea9ee11910856f2a12108bb18e493c523932f2e3db31d9c377995a0182c817a53d15c2421451b3680d05c476"}, 0xc9) (async) 19:55:10 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe5}, "7a5d73a53853b64485dea30706aa1032b6684a49c65663b2d94307724b5b86676b57101a061f2de3f954bb6784a18e7025c9fea2b0fd48d314c5c9383038ec8992ef1624ca0495baa278985435dda59efbb551b37352a83be36913a46f522d9c2ae70558f73f52c7cebdba5cc74dbef5c5d4db1be9aebae9e8a1cb6597c5190bf48163b62f4f42b22199cbd2871259e3f542908c266929f797e2d8898391e1879c396686bb5783d38c032c24395a38ae24718db7d4e010a2205dc627db81473406523c3447b11b7609efbe95d6e22f0157827d92036e3c6ba14ef14a3fb8c7932861f5518b"}, 0xe9) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe5}, "7a5d73a53853b64485dea30706aa1032b6684a49c65663b2d94307724b5b86676b57101a061f2de3f954bb6784a18e7025c9fea2b0fd48d314c5c9383038ec8992ef1624ca0495baa278985435dda59efbb551b37352a83be36913a46f522d9c2ae70558f73f52c7cebdba5cc74dbef5c5d4db1be9aebae9e8a1cb6597c5190bf48163b62f4f42b22199cbd2871259e3f542908c266929f797e2d8898391e1879c396686bb5783d38c032c24395a38ae24718db7d4e010a2205dc627db81473406523c3447b11b7609efbe95d6e22f0157827d92036e3c6ba14ef14a3fb8c7932861f5518b"}, 0xe9) 19:55:10 executing program 1: r0 = socket(0xf, 0x3, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x300}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa0010d2008e70c30000fffffeffffff0000003088870000"], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x9}}]}}, 0xf) [ 411.312766][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 411.330620][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 411.348642][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 411.415409][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 411.423481][ T5118] bt_err_ratelimited: 80 callbacks suppressed [ 411.423491][ T5118] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 411.424267][ T5127] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 411.429959][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 411.439731][ T5127] Bluetooth: hci4: SCO packet for unknown connection handle 200 19:55:10 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r2, r1, r0], 0x3) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000008843e6db183a38c9c808e9850b65152c012bb7eefc5ac6fb9506dcbfdf8f0868e70d480b5a"], 0xdf) 19:55:10 executing program 5: getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f00000001c0)=0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 411.445204][ T5118] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 411.453159][ T5127] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 411.479845][ T5127] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:10 executing program 1: r0 = socket(0xf, 0x3, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x300}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa0010d2008e70c30000fffffeffffff0000003088870000"], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x9}}]}}, 0xf) 19:55:10 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe5}, "7a5d73a53853b64485dea30706aa1032b6684a49c65663b2d94307724b5b86676b57101a061f2de3f954bb6784a18e7025c9fea2b0fd48d314c5c9383038ec8992ef1624ca0495baa278985435dda59efbb551b37352a83be36913a46f522d9c2ae70558f73f52c7cebdba5cc74dbef5c5d4db1be9aebae9e8a1cb6597c5190bf48163b62f4f42b22199cbd2871259e3f542908c266929f797e2d8898391e1879c396686bb5783d38c032c24395a38ae24718db7d4e010a2205dc627db81473406523c3447b11b7609efbe95d6e22f0157827d92036e3c6ba14ef14a3fb8c7932861f5518b"}, 0xe9) 19:55:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0445057fc90dc892"], 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:10 executing program 3: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c80024011c0c00080005001600040000df0000fa29b0b5c067d75f625f4d79ee826a9b00ff8903eb261c9a9a0edcbf39c80a0cef954c0cfeb7c440a217c6c1b547973ae27bce05211005b9520fb6cbec725907c6a72a5cdf63045dcedd711846b99a19262b1d94e8875d6e20ec72"], 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3f}, "4d2cbc02f0b26ebf4f25069d5c9f3db55ebe6c1b6250500cce0cbc604482dd99297783c5f531290f34c9178b419b698f5f516716f4bd2308d09b5d51dbf383"}, 0x43) [ 411.481928][ T5118] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 411.511917][ T5118] Bluetooth: hci3: SCO packet for unknown connection handle 200 19:55:10 executing program 5: getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f00000001c0)=0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0445057fc90dc892"], 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0445057fc90dc892"], 0x8) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) 19:55:10 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r2, r1, r0], 0x3) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000008843e6db183a38c9c808e9850b65152c012bb7eefc5ac6fb9506dcbfdf8f0868e70d480b5a"], 0xdf) 19:55:10 executing program 1: sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbc6, 0x63}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) [ 411.519906][ T5118] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 411.569918][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 411.598196][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:10 executing program 2: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20014408}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x60}}, 0x8000) r0 = socket(0x10, 0x400000000080803, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x197e16f942f675c}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004020}, 0x8000) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 19:55:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/226, 0xe2}, {&(0x7f00000011c0)=""/85, 0x55}, {&(0x7f0000001240)=""/67, 0x43}, {&(0x7f00000012c0)=""/62, 0x3e}, {&(0x7f0000001300)=""/249, 0xf9}], 0x6, &(0x7f0000001480)=""/25, 0x19}, 0x6}, {{&(0x7f00000014c0)=@un=@abs, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/162, 0xa2}, {&(0x7f0000002600)=""/98, 0x62}, {&(0x7f0000002680)=""/20, 0x14}], 0x4, &(0x7f0000002700)=""/139, 0x8b}, 0x9}, {{&(0x7f00000027c0)=@phonet, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002840)=""/250, 0xfa}, {&(0x7f0000002940)=""/113, 0x71}, {&(0x7f00000029c0)=""/98, 0x62}, {&(0x7f0000002a40)=""/45, 0x2d}, {&(0x7f0000002a80)=""/227, 0xe3}, {&(0x7f0000002b80)=""/194, 0xc2}], 0x6, &(0x7f0000002d00)=""/83, 0x53}, 0x152f}, {{&(0x7f0000002d80)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002e00)=""/254, 0xfe}, {&(0x7f0000002f00)=""/39, 0x27}, {&(0x7f0000002f40)=""/173, 0xad}, {&(0x7f0000003000)=""/199, 0xc7}, {&(0x7f0000003100)=""/231, 0xe7}, {&(0x7f0000003200)=""/160, 0xa0}, {&(0x7f00000032c0)=""/119, 0x77}], 0x7, &(0x7f00000033c0)=""/13, 0xd}, 0x2}, {{&(0x7f0000003400)=@llc, 0x80, &(0x7f0000004780)=[{&(0x7f0000003480)=""/106, 0x6a}, {&(0x7f0000003500)=""/63, 0x3f}, {&(0x7f0000003540)=""/176, 0xb0}, {&(0x7f0000003600)=""/30, 0x1e}, {&(0x7f0000003640)=""/113, 0x71}, {&(0x7f00000036c0)=""/93, 0x5d}, {&(0x7f0000003740)=""/9, 0x9}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x8, &(0x7f0000004800)=""/246, 0xf6}, 0x937d}, {{&(0x7f0000004900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004980)=""/171, 0xab}, {&(0x7f0000004a40)=""/10, 0xa}, {&(0x7f0000004a80)=""/150, 0x96}], 0x3}, 0x101}, {{&(0x7f0000004b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004c00)=""/52, 0x34}, {&(0x7f0000004c40)=""/2, 0x2}], 0x2, &(0x7f0000004cc0)=""/4096, 0x1000}, 0x4}], 0x7, 0x40, &(0x7f0000005e80)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) 19:55:10 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x116d}, "2fbfafef4a97e5bd92ca14fad358c9756b52763e3d5243e97db3177639174959590ac04a3229050348eb72a71fc137270f5e3fa3a59d7a784c45d939e4cd89dd08c961d5c60c1cec4897cbc9d3edd25d664eb6599ba1523ff03c3fdd095869ca0e9ab29df243d8e50cae1dff8d5b43c7473e1a08ac26e642f6faad12190f8f05b2ebd4be93d905a51ae29a374c51f7f7b5eb84888560bb54094d64fe106908bd688879acbf1d3821778a1ae0fe7082cac1869895393d9e362c0fdd06415ce8aa9f51d041aa5ea88bd0eee3dd40f0d46b119cdde449950253eccb35576981caa685a369e497c15b80134d8109a03876b3eaafed26b4a0d209d90c41df8f352c9e6e5ea394904123f180a7825a826ddab9921aefec408c3d7fd3bcee286781148dd38b2c158ef8fcbd81445aa4ed245f1327bf9730c8e315f01328b320d37ebd733da25533a2b9b6902d71c3a29e9ecf82d904c42c933ae1e052e6be387be12b0a849d1dcdaf7df32beb381006c2ae83e93f7ddc83b7341fc40b9def08558c5ddc03f91aeca2a7e18924e26df7af8c3c60c36bb066b4bca5d3c89fe56585e3ee98bccb0722fa67014a2fca0616a59d86e6f5a3568b7c7e4832e748c3e2abdf621935e6a8a816152d092ba01ec2d1b7d95012fd9f9a2b801ea97f698ff84c1f41e93852a94dcc3911181bc5e6dbe5e911f06720b92442c918f662e318dcebef5294f9d6c13b00dca8c8a4a26c4f3ac89dffbad1bd4127e4dec0bbb9d8fddccd92631330bdd3633cb1382e43ae605da8f338e44f3caafdd6427aef905d5a0f45be7296d231015b06c220735d105e45cd5ec1cd22c1427b226698bad4ec11eab563ff4188f40fc479f874aa66e092914456975dfadc5b20f36770df02af4a1d0b07ddf3ffc80eacbc3767b07e450ec98cb36d3b439dbf891c202ecefd1b51c43969442a25417672d1a9ee6a9369b852574055e77224a2c44ca6f2866ea7106e0e689581a74049ce556354e00547513eeea7a9574fef55cefd572303d9b238d161bd8b3be7bb33743025398c1aa1dc494317f7d5bcda2fae888d1b6680c3f745eda77a78e1cc78417beb90817dc4164c6eb9141a916cfa799f13d4d781a8adab22733c508b1367a0cf70aeaf9e9718eeb139a3fff0150768658f9d03639a17e1274f79dc4d34d46b585655c7709afd9285f8a92283f8e5a12d109c2db53da094726ccc2071b652849e14e63f3c2f6e7fc46ef6193075359c01f9cc30998f4713a6d12a228a0f6b541cb0e9b439a79d6f7d1f2e9c8b3090f2c2ad4a90649e198d87fff10f90773f7940ac4e9f92a0baf094bb4348ef51d5b054b1fbd428cce49a7e62c4f30440d420b777922a97746abef2f8a7135d2af87ded1a6ff2cf0d9ddd9bcbaaa3713b91fcb0867b0571d062c40dc181f7eb4d70f01a03eed8728026bf38dcd3c2dcded496afd2bce56c966994cbd49d1dce6c49f789add2d8445f70f6ae87eefbc33a8210a6a83e75f5437a6584738639f0263fe7be79f0173f97e3372f9a72f5a93ee1407a7eab63ea3f8001f317b6999671779e844fb939e04d85ece519f280e4bff9c24af5b43e990477693171279eddb2de37625fd09f173a0b3c11288127d703d8714d3a270fdef9ecf007dfb6795f340c4196979f7a1194b6e22df0b501ce8c8b96b4e220a8a1c2e4e7eb48cd13d1d2f261dfd866228ca38a6f5493fccc3dfe164ea9c95c62b5ba5d29f016bfbed06060c888275695d9e29276c6cfeca7db6bd6b4b555caed38ded729910906ee4031c5ad1cde547921c2959b2e51eca63862c04299086e81422bd27e008dc345e77fa3213da2582a8d7d0477fd6155445e183b9e5ade8ed81f969d5f9d58df3deb18097f67caac17282d15dc2210ae6df5249a700df7060ab81be0264e276f2ed0d8ec69ce95e42b26e1846ea86d8f98660fb3f38914d036fef799f4a5fa3384ecdf3898d61fcd36e647af9adc6ec2b2b24552aea7100e6f363028bc76b427723cde6c3e01eb3d8aaaf6db133f80bc03ae33a06597eb5e10140f263bdbd71239f9b42eb9a65010d6e541575753b8693fca24579076c618a251fb224fdd4aad2d41729b184875faf5f1fdce03fb1a3849ce3bb47d7871dc903c77510f95f46c77d76b5e996100e52f8c516c5e29831896657faa065a6b7ee719dbb32957719adbf80d1314f395dd964d27c551e0c481c886bb9f5a99cfccef9ff73bf670a474b26f569629b8cad05ee5bd74392a48fc51797c14ba05e3cf1de88af2229da3089aba6614b474fcd0788adfdb180221e94c0da46e9c3c8a7b51c28f765042458b5e04b0063da15cec15956eed487b94f5f6be6eefdf411595c37961ac340d62a7b2d8f22d112798284e061a675857e8aad0b01e1fe7bcad4e27ca2af7ce2bf61a527525d124b550253f5d9afc0c55ce57f7f8f27778af5b8fa9da5dab89c97a5747f2a85bb9f046662fdc5d3834775e7184311ae4e9526f85d9eedeedd6e3b194987edb7c4a1418ecee24f2597eff4af53a046302127b82a987f1713857a7f796ea6957e18adfc08d0a8aa44a07bd543dd7da0e5cbcde4ff79251abd0b568a0835128e6832782f064a6d2316e01c65d4c4f1e460a4b7e83b7083cbde7054231363c833f2a31995a5cf0e07d2620738a4941fc7aa8aebde37d13a35d5ddba6c567d1cbb0c6ab3e95b509cec70773b1978ae976404f611b2f340cab33cd8ba15bd1e00fc8ee56a9ee2dbdf18f3dce45bccf9dd673633b082da2e169e640b67fc7177aa89d88ed7da1d975094e989f3cba8e816128185b3985862336f78fa106895243d6318b4d987c9176f089f787f78b2d0a8c455603cafeb59d5f051aaee89ed0ae639e58e5d490fa2fcfcaf22c569fb442cc1e411335732901fe4b2e35561284efee321ca9638b588ec949c98c101036610fc0e85751f763df05adf328526a817e4a7627a432d845e88f20af4bd0a0ea518cdc64fc995e81a11d234103f632d423bb7cdf6c4c64b24459a81b10895bc89bbc2e45859c174175cc94a77d910e65414f108f9b439a7acb3a68af3ea0278eed8d6b0a5f7b0b85540009bd7817264afa3f0c69082beb8d1aca1f6df8d49dac4b5d2382f439790b1547e3b1db714d568a03ea27d837d9a62dc045ff43d86914241f173ac478f8f29b057f9fdbe5c71893326765b9b7269b1c9124400b35fb7f11b2c511cc632d400bd79cbe05e99f3d06fdba567e9bf34dbbb7c75e7297936f81cc8285159323b8c45ac6981d2271f12a689d43f6645ab2879cfa588303ad097ce165abcc04f23532ec74d29207685729096a7ad89eb7273f3d3de26b87c4efb3992e5f7914b7b133c77cf692fd6539682d08267815854da59377a2414eec6cd987bd8f5beff5eba4b69200c3081f4632f39eb825452a22cc1a179c64d1cfe64050abcd6eeb3a2ccb778a1e17de2378b6d411938d50dfb257866e0b84d5647568404a58e88ce3f4cad7b125af290ada308a88551b4e966aec936d042565bb8e5304ab99e4bbb5ec4a8b1e20a509403be0d5e5c379592d01c1620df2517270b08fd381c980e9ec3347505eafe16607dc8fd9a01cbbba90ea329a156b03c1b93c137960f55fac3ed4b6a2f87ede3aaf0d181f556f03b76c99c113f366d5d8b1f3535281f97c7ceb7ee97e2b9c5e0c56f0dfae6db34449956826bce4fbc91d3473e46e606e45d75354864558eccb0957725251f114330a0ee780febaa94d31b1a705876e1c5cec3e874bf1c2adf854d2db5b0ba467f2e74784b5ee7f1f11d43f8055f3dbf6091ca80a287a0d3feece534e30b67750ff463023bcec26d6efb8c9750592380d2cecd180d07ac87201b6aa8831e420b6a44c3e284e73f3c2ae0bf2a6965ed00df232900c36803aeb9634cbfddd649446dc7f358126b33b5cc1cd972dc84be0453e84de8202cb20860a77bd6af09b3d89f46c7706fd66bd56837e135339b25b955634c6a632154cf1dd50184340fea0392d38526c95fca13b56474ed42c2f5919e7fcaa089e40b2ce4b9cf14425bbb83ab1a317080f0dbf36d25a8c68a3a5bf39167189a140c37be9e5695a3a709ec4df0a38240f0b4ea4ca845e79d93fd5d707a857c2d2414797d7cbbf23dc0fa3ca6481b79ec523464946b1a55d4fbdc1b7706be51c7a7029c012267a2c688abf6eb394c143e847665c78c6b2be07e75e15f164b7f864ea39e3b8d354f131a30db8b122b2397614471c09c0ee23830fee747ba59938e3dee074b6cace5124993416f5531c555d264d1c9ebd651a0b4d8931023217ab01f8b1d1523be5454d02d9de6d951e36350871d6a45b6eed25aa3af32515d76041deae8c6d808e5943ddc20876e4ec9eb339a01a715698df6b48eb9885f4e2259cf7b41d474597822fa912f3d27315fd6b6bac320441bb4d8018a68439249dd65e586dbda19cd9361b4144c17af4a75cbb3b552e7eaa9fa56eb4d194238b480ddbb103cc8205336b91f89445dabe14f084e635ad6cb07db2762e919c47e16d3588444ee2a75308963dfd2a75fcb9014e423754258a2f5bed11d6eb2eb38ae815ca2e9f5327821e251059d97349fc729e7962a4e231ea85fcf7b8112a159d613a8568d7f5145d92ca7f8fb3556662ed1eedd25eff868b0a4fa618752a2011fb277ed8338c0a6d11b44ac1c5d93049623a68ee1e87c10b045a4ae03be70b59679f06b0d0e4d85b06f61e0acaf1977254ffaeb5d1703b787235efa1aecffaa975f8d533738bb0a52296bcd0dd3274042a634c4f3210de14dcc54b7a8a583157529700368b323c7bfe253d1b553078a59ba4d3c515c44020b02c70ce9dd917afbb4d8fd187460bcec3e2e56d540ac15cdeb4a3d7533f23ca540898c152ae2dd6681d8fc49903f808a1c1d831e7cb4eeaf97544950385b402e07039e3bc648c6d43a28e05b23e0af38a965daf9bcb38ecaff72119d26ad786fcf764e631e01ba0be45e0c0f97caef00d610b9a8376accc3c265dcbb11ea6babbe187404724c14c7e688e1792712600b772da668628bfe155e46ee435ac53bd2b189ba9d7b73ee841c625a1d1d75b15fd36fd5899ed09be93deb44eccdaa4c77f8a050d7e469731aa38de8f29883b09c997ce24b8a32317ffd21e234f114916c02de34501e0648bb02c5bfd21854bc35a2ac72459f7ee508e88a0720d308eab6824d0780f7a464f06dd8282528344cf79f30a32d714bd044e6e862febf99da4ae2f2bd105daffa4827bac57f49b84bb4c83b2abb4242242d4d3883bf79d45b45621da7eb520f0ebc057cdb252a4228d38fcb27da4375933cafedee43330e9aa99f94a2e44bf5680fa8aa925e6546f0bf18d66b3c7605e1a6b8decbaebf0f92b0b9e3091432b156d652c2ba383909c37ca571901c56aacad5971ae50f9dfb1b543dec29ac1a0e33c1da081edc849c59439b3a7f71f120e375d2f71e33c71741c20b3b186ba28ca8402c1e111f4ee0f83ae8a6af819468c43e1383791fe1ab963e5a8854f980a3d8fb01345596faf434fd9b51e3e7dab52af5a7e5aca0aefa91f3229c6c6181a7a85e291501ea50a030b655155f095387157e68c95a1872f9b69a7ec9a4fb59253f38efbb7046895b802d1be32fc23a2f9bb9c9fbf3a6aff09037ade2a08cecbde68d3af618097fe3c03e67b74d9d50a146e341843da943d2faf2ec68b90941de37793c4d2baa8cb4f56bce6148059d0652b3fffac8d7e679f38051c34359e61fd640a1ec3138a4f42a858e2064d2007c419666eceed7bb5776885b5508e465a6e31615b521e8add26629f1839e4790fe32b694822a25438c172f6677a214733f2ce421d8f72862f7ac79155e4f8aaea9cf419183f62de243127eedeb09daeb5b0cbb833d6356c0eba0b03b2a39b0b1523e533a4e3054cfcad0b1fa794aee101d897d32d45bcdc2e98c44ed38d4d5c25e9be051b46f20b04b35fed1eb000e968068f5664ccec64b4960a8b47bc5733f23709fd7a481845fddf8168aa0c4daaf57ecd6912177066bc623dc5c5dba26414c035830788bc5fc8e4addbb8506c7938aa9eb0e1f55698e9c56b0367ca9ab7dad65cff625e1ac4f0c7fa6b98597175a85cf9ad1253ef944ed10882d36f757c20430cfa830af1a9246179bca4e74d20ec483e1f38e81ad5b959414daef36852b587745f9652d3bac73ddd487c8cfb0292511c99edeef9caf5a5bce7cbe88ec1ecba4e369e9402f96a6f1fb5b22b15bc993d2e75fbe6e5dad0e7140fa026b5b63fee13c20983752b81517b801bfe7a3027e684333e0a3a60f79389"}, 0xffffffffffffff76) [ 411.616645][ T5118] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 411.633124][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0xdf) 19:55:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0445057fc90dc892"], 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:10 executing program 1: sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbc6, 0x63}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbc6, 0x63}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) [ 411.658100][ T5118] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 411.699899][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 411.720150][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:10 executing program 2: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20014408}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x60}}, 0x8000) (async) r0 = socket(0x10, 0x400000000080803, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x197e16f942f675c}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004020}, 0x8000) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 19:55:10 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x116d}, "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"}, 0xffffffffffffff76) 19:55:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/226, 0xe2}, {&(0x7f00000011c0)=""/85, 0x55}, {&(0x7f0000001240)=""/67, 0x43}, {&(0x7f00000012c0)=""/62, 0x3e}, {&(0x7f0000001300)=""/249, 0xf9}], 0x6, &(0x7f0000001480)=""/25, 0x19}, 0x6}, {{&(0x7f00000014c0)=@un=@abs, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/162, 0xa2}, {&(0x7f0000002600)=""/98, 0x62}, {&(0x7f0000002680)=""/20, 0x14}], 0x4, &(0x7f0000002700)=""/139, 0x8b}, 0x9}, {{&(0x7f00000027c0)=@phonet, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002840)=""/250, 0xfa}, {&(0x7f0000002940)=""/113, 0x71}, {&(0x7f00000029c0)=""/98, 0x62}, {&(0x7f0000002a40)=""/45, 0x2d}, {&(0x7f0000002a80)=""/227, 0xe3}, {&(0x7f0000002b80)=""/194, 0xc2}], 0x6, &(0x7f0000002d00)=""/83, 0x53}, 0x152f}, {{&(0x7f0000002d80)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002e00)=""/254, 0xfe}, {&(0x7f0000002f00)=""/39, 0x27}, {&(0x7f0000002f40)=""/173, 0xad}, {&(0x7f0000003000)=""/199, 0xc7}, {&(0x7f0000003100)=""/231, 0xe7}, {&(0x7f0000003200)=""/160, 0xa0}, {&(0x7f00000032c0)=""/119, 0x77}], 0x7, &(0x7f00000033c0)=""/13, 0xd}, 0x2}, {{&(0x7f0000003400)=@llc, 0x80, &(0x7f0000004780)=[{&(0x7f0000003480)=""/106, 0x6a}, {&(0x7f0000003500)=""/63, 0x3f}, {&(0x7f0000003540)=""/176, 0xb0}, {&(0x7f0000003600)=""/30, 0x1e}, {&(0x7f0000003640)=""/113, 0x71}, {&(0x7f00000036c0)=""/93, 0x5d}, {&(0x7f0000003740)=""/9, 0x9}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x8, &(0x7f0000004800)=""/246, 0xf6}, 0x937d}, {{&(0x7f0000004900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004980)=""/171, 0xab}, {&(0x7f0000004a40)=""/10, 0xa}, {&(0x7f0000004a80)=""/150, 0x96}], 0x3}, 0x101}, {{&(0x7f0000004b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004c00)=""/52, 0x34}, {&(0x7f0000004c40)=""/2, 0x2}], 0x2, &(0x7f0000004cc0)=""/4096, 0x1000}, 0x4}], 0x7, 0x40, &(0x7f0000005e80)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) socket$phonet_pipe(0x23, 0x5, 0x2) (async) recvmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/226, 0xe2}, {&(0x7f00000011c0)=""/85, 0x55}, {&(0x7f0000001240)=""/67, 0x43}, {&(0x7f00000012c0)=""/62, 0x3e}, {&(0x7f0000001300)=""/249, 0xf9}], 0x6, &(0x7f0000001480)=""/25, 0x19}, 0x6}, {{&(0x7f00000014c0)=@un=@abs, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/162, 0xa2}, {&(0x7f0000002600)=""/98, 0x62}, {&(0x7f0000002680)=""/20, 0x14}], 0x4, &(0x7f0000002700)=""/139, 0x8b}, 0x9}, {{&(0x7f00000027c0)=@phonet, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002840)=""/250, 0xfa}, {&(0x7f0000002940)=""/113, 0x71}, {&(0x7f00000029c0)=""/98, 0x62}, {&(0x7f0000002a40)=""/45, 0x2d}, {&(0x7f0000002a80)=""/227, 0xe3}, {&(0x7f0000002b80)=""/194, 0xc2}], 0x6, &(0x7f0000002d00)=""/83, 0x53}, 0x152f}, {{&(0x7f0000002d80)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002e00)=""/254, 0xfe}, {&(0x7f0000002f00)=""/39, 0x27}, {&(0x7f0000002f40)=""/173, 0xad}, {&(0x7f0000003000)=""/199, 0xc7}, {&(0x7f0000003100)=""/231, 0xe7}, {&(0x7f0000003200)=""/160, 0xa0}, {&(0x7f00000032c0)=""/119, 0x77}], 0x7, &(0x7f00000033c0)=""/13, 0xd}, 0x2}, {{&(0x7f0000003400)=@llc, 0x80, &(0x7f0000004780)=[{&(0x7f0000003480)=""/106, 0x6a}, {&(0x7f0000003500)=""/63, 0x3f}, {&(0x7f0000003540)=""/176, 0xb0}, {&(0x7f0000003600)=""/30, 0x1e}, {&(0x7f0000003640)=""/113, 0x71}, {&(0x7f00000036c0)=""/93, 0x5d}, {&(0x7f0000003740)=""/9, 0x9}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x8, &(0x7f0000004800)=""/246, 0xf6}, 0x937d}, {{&(0x7f0000004900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004980)=""/171, 0xab}, {&(0x7f0000004a40)=""/10, 0xa}, {&(0x7f0000004a80)=""/150, 0x96}], 0x3}, 0x101}, {{&(0x7f0000004b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004c00)=""/52, 0x34}, {&(0x7f0000004c40)=""/2, 0x2}], 0x2, &(0x7f0000004cc0)=""/4096, 0x1000}, 0x4}], 0x7, 0x40, &(0x7f0000005e80)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) [ 411.764209][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 411.772716][ T5118] Bluetooth: hci4: command 0x0409 tx timeout [ 411.800388][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0xdf) 19:55:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/17], 0x11) 19:55:10 executing program 1: sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbc6, 0x63}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) [ 411.813640][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/17], 0x11) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/17], 0x11) (async) 19:55:10 executing program 2: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20014408}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x60}}, 0x8000) r0 = socket(0x10, 0x400000000080803, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x197e16f942f675c}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004020}, 0x8000) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 19:55:10 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x116d}, "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"}, 0xffffffffffffff76) 19:55:10 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0x88, 0xffff}}}}, 0x11) 19:55:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0xdf) 19:55:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) (rerun: 32) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/17], 0x11) [ 411.911679][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 411.942758][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:10 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0x88, 0xffff}}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0x88, 0xffff}}}}, 0x11) (async) 19:55:10 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x120, 0x24, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x10, 0xfff2}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf5}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0x3f, 0xffff, 0x6, 0x1, 0xfffffffb, 0xf9}}, {0x4}}, {{0x1c, 0x1, {0x3f, 0x7, 0x2, 0xe8, 0x2, 0x1, 0x6, 0x5}}, {0xe, 0x2, [0x7ff, 0xe4, 0x2, 0x7f, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3e, 0xb, 0xfffa, 0xfffffffe, 0x2, 0x8, 0xfffffd88, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0xfa, 0x7, 0xcf4b, 0x3, 0x2, 0x10000, 0x9, 0x9}}, {0x16, 0x2, [0x196, 0xa, 0xf801, 0x6, 0x400, 0x40, 0x4, 0x283, 0x1d]}}]}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0xfffd, 0x3f, 0x2, 0x3, 0x7, 0x9}}, {0x16, 0x2, [0x4, 0xff, 0x5, 0x9009, 0xd15, 0xb3, 0x20, 0xcf, 0x22f]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x9a}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 19:55:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/226, 0xe2}, {&(0x7f00000011c0)=""/85, 0x55}, {&(0x7f0000001240)=""/67, 0x43}, {&(0x7f00000012c0)=""/62, 0x3e}, {&(0x7f0000001300)=""/249, 0xf9}], 0x6, &(0x7f0000001480)=""/25, 0x19}, 0x6}, {{&(0x7f00000014c0)=@un=@abs, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/162, 0xa2}, {&(0x7f0000002600)=""/98, 0x62}, {&(0x7f0000002680)=""/20, 0x14}], 0x4, &(0x7f0000002700)=""/139, 0x8b}, 0x9}, {{&(0x7f00000027c0)=@phonet, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002840)=""/250, 0xfa}, {&(0x7f0000002940)=""/113, 0x71}, {&(0x7f00000029c0)=""/98, 0x62}, {&(0x7f0000002a40)=""/45, 0x2d}, {&(0x7f0000002a80)=""/227, 0xe3}, {&(0x7f0000002b80)=""/194, 0xc2}], 0x6, &(0x7f0000002d00)=""/83, 0x53}, 0x152f}, {{&(0x7f0000002d80)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002e00)=""/254, 0xfe}, {&(0x7f0000002f00)=""/39, 0x27}, {&(0x7f0000002f40)=""/173, 0xad}, {&(0x7f0000003000)=""/199, 0xc7}, {&(0x7f0000003100)=""/231, 0xe7}, {&(0x7f0000003200)=""/160, 0xa0}, {&(0x7f00000032c0)=""/119, 0x77}], 0x7, &(0x7f00000033c0)=""/13, 0xd}, 0x2}, {{&(0x7f0000003400)=@llc, 0x80, &(0x7f0000004780)=[{&(0x7f0000003480)=""/106, 0x6a}, {&(0x7f0000003500)=""/63, 0x3f}, {&(0x7f0000003540)=""/176, 0xb0}, {&(0x7f0000003600)=""/30, 0x1e}, {&(0x7f0000003640)=""/113, 0x71}, {&(0x7f00000036c0)=""/93, 0x5d}, {&(0x7f0000003740)=""/9, 0x9}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x8, &(0x7f0000004800)=""/246, 0xf6}, 0x937d}, {{&(0x7f0000004900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004980)=""/171, 0xab}, {&(0x7f0000004a40)=""/10, 0xa}, {&(0x7f0000004a80)=""/150, 0x96}], 0x3}, 0x101}, {{&(0x7f0000004b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004c00)=""/52, 0x34}, {&(0x7f0000004c40)=""/2, 0x2}], 0x2, &(0x7f0000004cc0)=""/4096, 0x1000}, 0x4}], 0x7, 0x40, &(0x7f0000005e80)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) 19:55:10 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="3757dd4df4aee1e334ca7a4ee90de78a37958255ca64f935a82159de4409882f08a9860608a1d7fd73e1e2052713e7b1b0cc421171e372da1282794d574a9c3e1cc5b07406e07b198a1dbb3383ebe11d47d59d916cfa6534d2e41da4282e4c7ebcb9625c3033c8858bd0ad393bdde06a7bcb823a379cabddb1289d462778cd2e63fbc8b842389627c23a34a9da035de14bd89f170c480c5e763dc9daaabceee7b81638682512c052d58cbf9d362b21ec3d"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0xc0, 0xe}, {0x6, 0x0, [0x8, 0xffff, 0x1beb, 0x20, 0x2]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 411.987024][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:10 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1d}, {0x7, [{0xc8, 0x4}, {0xc9, 0x2}, {0xc9, 0x8000}, {0xc8, 0x80}, {0xc8, 0x80}, {0xc8, 0x8}, {0xc8, 0x4}]}}}, 0x20) 19:55:10 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xc, 0x4}, {0x88, 0xffff}}}}, 0x11) [ 412.040530][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 412.050401][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="2200000c000800050016fd04000000a80e"], 0x11) 19:55:10 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1d}, {0x7, [{0xc8, 0x4}, {0xc9, 0x2}, {0xc9, 0x8000}, {0xc8, 0x80}, {0xc8, 0x80}, {0xc8, 0x8}, {0xc8, 0x4}]}}}, 0x20) 19:55:10 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="3757dd4df4aee1e334ca7a4ee90de78a37958255ca64f935a82159de4409882f08a9860608a1d7fd73e1e2052713e7b1b0cc421171e372da1282794d574a9c3e1cc5b07406e07b198a1dbb3383ebe11d47d59d916cfa6534d2e41da4282e4c7ebcb9625c3033c8858bd0ad393bdde06a7bcb823a379cabddb1289d462778cd2e63fbc8b842389627c23a34a9da035de14bd89f170c480c5e763dc9daaabceee7b81638682512c052d58cbf9d362b21ec3d"], 0x9) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0xc0, 0xe}, {0x6, 0x0, [0x8, 0xffff, 0x1beb, 0x20, 0x2]}}}}, 0x1b) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:10 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0402f20cb5931d02aaaaaaaaaa000000008e70c30000ffffffffffff00000030"], 0x20) syz_emit_vhci(&(0x7f00000010c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_disconn_req={{0x6, 0xff, 0x4}, {0x1, 0x5e}}, @l2cap_conn_req={{0x2, 0xb7, 0x4}, {0x1, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x0, 0x8}}]}}, 0x21) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0x0, 0x1000}, "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"}, 0x1004) [ 412.087412][ T5118] Bluetooth: hci2: command 0x0409 tx timeout [ 412.100888][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 412.113408][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 412.128643][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:10 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:10 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x120, 0x24, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x10, 0xfff2}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf5}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0x3f, 0xffff, 0x6, 0x1, 0xfffffffb, 0xf9}}, {0x4}}, {{0x1c, 0x1, {0x3f, 0x7, 0x2, 0xe8, 0x2, 0x1, 0x6, 0x5}}, {0xe, 0x2, [0x7ff, 0xe4, 0x2, 0x7f, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3e, 0xb, 0xfffa, 0xfffffffe, 0x2, 0x8, 0xfffffd88, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0xfa, 0x7, 0xcf4b, 0x3, 0x2, 0x10000, 0x9, 0x9}}, {0x16, 0x2, [0x196, 0xa, 0xf801, 0x6, 0x400, 0x40, 0x4, 0x283, 0x1d]}}]}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0xfffd, 0x3f, 0x2, 0x3, 0x7, 0x9}}, {0x16, 0x2, [0x4, 0xff, 0x5, 0x9009, 0xd15, 0xb3, 0x20, 0xcf, 0x22f]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x9a}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x120, 0x24, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x10, 0xfff2}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf5}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0x3f, 0xffff, 0x6, 0x1, 0xfffffffb, 0xf9}}, {0x4}}, {{0x1c, 0x1, {0x3f, 0x7, 0x2, 0xe8, 0x2, 0x1, 0x6, 0x5}}, {0xe, 0x2, [0x7ff, 0xe4, 0x2, 0x7f, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3e, 0xb, 0xfffa, 0xfffffffe, 0x2, 0x8, 0xfffffd88, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0xfa, 0x7, 0xcf4b, 0x3, 0x2, 0x10000, 0x9, 0x9}}, {0x16, 0x2, [0x196, 0xa, 0xf801, 0x6, 0x400, 0x40, 0x4, 0x283, 0x1d]}}]}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0xfffd, 0x3f, 0x2, 0x3, 0x7, 0x9}}, {0x16, 0x2, [0x4, 0xff, 0x5, 0x9009, 0xd15, 0xb3, 0x20, 0xcf, 0x22f]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x9a}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) (async) 19:55:10 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0402f20cb5931d02aaaaaaaaaa000000008e70c30000ffffffffffff00000030"], 0x20) (async) syz_emit_vhci(&(0x7f00000010c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_disconn_req={{0x6, 0xff, 0x4}, {0x1, 0x5e}}, @l2cap_conn_req={{0x2, 0xb7, 0x4}, {0x1, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x0, 0x8}}]}}, 0x21) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0x0, 0x1000}, "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"}, 0x1004) 19:55:10 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1d}, {0x7, [{0xc8, 0x4}, {0xc9, 0x2}, {0xc9, 0x8000}, {0xc8, 0x80}, {0xc8, 0x80}, {0xc8, 0x8}, {0xc8, 0x4}]}}}, 0x20) [ 412.206330][ T5118] Bluetooth: hci0: Malformed Event: 0x02 [ 412.212694][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 412.244364][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:10 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="2200000c000800050016fd04000000a80e"], 0x11) 19:55:10 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x120, 0x24, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x10, 0xfff2}, {0xfff3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf5}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0x3f, 0xffff, 0x6, 0x1, 0xfffffffb, 0xf9}}, {0x4}}, {{0x1c, 0x1, {0x3f, 0x7, 0x2, 0xe8, 0x2, 0x1, 0x6, 0x5}}, {0xe, 0x2, [0x7ff, 0xe4, 0x2, 0x7f, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3e, 0xb, 0xfffa, 0xfffffffe, 0x2, 0x8, 0xfffffd88, 0x1}}, {0x6, 0x2, [0x20]}}, {{0x1c, 0x1, {0xfa, 0x7, 0xcf4b, 0x3, 0x2, 0x10000, 0x9, 0x9}}, {0x16, 0x2, [0x196, 0xa, 0xf801, 0x6, 0x400, 0x40, 0x4, 0x283, 0x1d]}}]}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0xfffd, 0x3f, 0x2, 0x3, 0x7, 0x9}}, {0x16, 0x2, [0x4, 0xff, 0x5, 0x9009, 0xd15, 0xb3, 0x20, 0xcf, 0x22f]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x9a}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) [ 412.252334][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.260082][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.267838][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.275526][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.276355][ T5127] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 412.283813][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.283856][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.283896][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.283934][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.283972][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.284012][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.337987][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.345655][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.353492][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.361222][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.369883][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.370262][ T5127] Bluetooth: hci0: Malformed Event: 0x02 [ 412.377583][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.377627][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.377664][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:11 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00ffff5c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8ed4a5f792b3215824ac6b2a8693499ff706938254f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91bf7a99a5ee5010ac6405b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811896c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df12f21bba21c5f906bc2007866183fc660afe627366a65b7ade742346bd5825004458fe881e18dac154e75862b26c7bc05e29484a"], 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="3757dd4df4aee1e334ca7a4ee90de78a37958255ca64f935a82159de4409882f08a9860608a1d7fd73e1e2052713e7b1b0cc421171e372da1282794d574a9c3e1cc5b07406e07b198a1dbb3383ebe11d47d59d916cfa6534d2e41da4282e4c7ebcb9625c3033c8858bd0ad393bdde06a7bcb823a379cabddb1289d462778cd2e63fbc8b842389627c23a34a9da035de14bd89f170c480c5e763dc9daaabceee7b81638682512c052d58cbf9d362b21ec3d"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0xc0, 0xe}, {0x6, 0x0, [0x8, 0xffff, 0x1beb, 0x20, 0x2]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:11 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) [ 412.377701][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.377737][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.377773][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.377809][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.377845][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.377882][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:11 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0402f20cb5931d02aaaaaaaaaa000000008e70c30000ffffffffffff00000030"], 0x20) (async) syz_emit_vhci(&(0x7f00000010c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_disconn_req={{0x6, 0xff, 0x4}, {0x1, 0x5e}}, @l2cap_conn_req={{0x2, 0xb7, 0x4}, {0x1, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0x0, 0x8}}]}}, 0x21) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0x0, 0x1000}, "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"}, 0x1004) 19:55:11 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="2200000c000800050016fd04000000a80e"], 0x11) [ 412.384643][ T5127] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 412.391751][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.473081][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.480841][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.489205][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.496879][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.504618][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.512345][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.520069][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.527790][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.535454][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.543215][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:11 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 412.546324][ T5127] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 412.550988][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.551029][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.551066][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.551103][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.551139][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.551176][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.559330][ T5127] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 412.566474][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.624383][ T5127] Bluetooth: hci0: Malformed Event: 0x02 [ 412.625133][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.630132][ T5127] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 412.637760][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:11 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 412.637800][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.660843][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.668623][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.676294][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.684039][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.692329][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.700068][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:11 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x80000000}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xb}, @l2cap_cid_signaling={{0x7}, [@l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x2, 0xff}}]}}, 0x10) [ 412.707789][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.715466][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.723225][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.728154][ T5127] Bluetooth: Unexpected start frame (len 218) [ 412.731066][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.744937][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:11 executing program 4: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x400180, 0x22) fgetxattr(r0, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)=""/30, 0x1e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x8}}}}, 0xf) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) [ 412.752700][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.754884][ T5127] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 412.760392][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.760431][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.783426][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.791145][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000280)=""/4096) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r0, r0, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001400), 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25020000000c00060003000000000000000c00078008000100", @ANYRES32=r4, @ANYBLOB="2400078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00050020ecae6401f7c0f1"], 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x90) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) 19:55:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:11 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 19:55:11 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x80000000}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xb}, @l2cap_cid_signaling={{0x7}, [@l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x2, 0xff}}]}}, 0x10) 19:55:11 executing program 4: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x400180, 0x22) fgetxattr(r0, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)=""/30, 0x1e) (async) fgetxattr(r0, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)=""/30, 0x1e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x8}}}}, 0xf) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) [ 412.803847][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.811652][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.819372][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.827239][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 412.839804][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 412.849253][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:11 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x2, @any, "e42facd1ad352ceae11dbc4f4aab4e7e8c1a1980fca5321513f16f8a2ea8d82ce919ae1ff2ca9c328964ca1d43ae2b08603e014fc92eb53c39d724f7b90c9eb065025cfb1d28bcec117816f49c2adff300fa518e66d31e707f8b172c88955594a501f1ae677f8f74a50f7b7d4120bc51cfe99f9cd56352e4d0a750f2d1e2098b9a0756dea012812e21d25754516641e8585e3c3f09c76e89455cbe4a7b71658ce21712981b8b463d9379f7227588a84e67aecae4d1874d9e8fa7f405aca394448637c1b49bc0f62a5147100c89138795bab3a3ea332b39e878a1b0911a192de6ae3e213ea3b7076dbc78f55f2d54db702857675492a75d25"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x44}, "31febd3dcb143ce922d3a5c81bf637f80fe23ae2438ad91d5f8da34c8c1281ca6e28ed3e55976099d10a8a55a9ab81e8a917c900a01468600854d6b076c66fce83b7ebe5"}, 0x48) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xde}, "6637c0bf1edb64f4b54046eda32130c0e736bec493b7befd88fc4522d8970864aa92b9a15add517320bb013491a229ba913fcba606fd14b2b8925e40d021055c88178cacab3b2cf5304fe381d3659f210592d8286c54e0c8d1c0b8d1f359c340295c5cbb91ee797f420f99bc5be0a6b99c462d31ac0518cbd57e05a12669e05fc007da3203572cb64948b8b743970d511177f20fd29f3f931759846c1d608120a1976275cfa0f302c3849c3f7dbb2ed7d5f0ac680ae2a33ebb9757b2b679522fbf8513a233891d556341b449d30b445e165acb7aab233be10a482ac33d5f"}, 0xe2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x7f, 0xed, "735c009590baef8f"}}}, 0x10) 19:55:11 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) (async) 19:55:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000280)=""/4096) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r3) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) (async) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = dup3(r0, r0, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001400), 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25020000000c00060003000000000000000c00078008000100", @ANYRES32=r4, @ANYBLOB="2400078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00050020ecae6401f7c0f1"], 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x90) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) 19:55:11 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x80000000}}}, 0xd) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xb}, @l2cap_cid_signaling={{0x7}, [@l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x2, 0xff}}]}}, 0x10) (rerun: 64) [ 412.884767][ T5118] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 412.929124][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.006569][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.014560][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.022445][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.034952][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.042798][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:11 executing program 4: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x400180, 0x22) fgetxattr(r0, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)=""/30, 0x1e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x8}}}}, 0xf) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) 19:55:11 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x2, @any, "e42facd1ad352ceae11dbc4f4aab4e7e8c1a1980fca5321513f16f8a2ea8d82ce919ae1ff2ca9c328964ca1d43ae2b08603e014fc92eb53c39d724f7b90c9eb065025cfb1d28bcec117816f49c2adff300fa518e66d31e707f8b172c88955594a501f1ae677f8f74a50f7b7d4120bc51cfe99f9cd56352e4d0a750f2d1e2098b9a0756dea012812e21d25754516641e8585e3c3f09c76e89455cbe4a7b71658ce21712981b8b463d9379f7227588a84e67aecae4d1874d9e8fa7f405aca394448637c1b49bc0f62a5147100c89138795bab3a3ea332b39e878a1b0911a192de6ae3e213ea3b7076dbc78f55f2d54db702857675492a75d25"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x44}, "31febd3dcb143ce922d3a5c81bf637f80fe23ae2438ad91d5f8da34c8c1281ca6e28ed3e55976099d10a8a55a9ab81e8a917c900a01468600854d6b076c66fce83b7ebe5"}, 0x48) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xde}, "6637c0bf1edb64f4b54046eda32130c0e736bec493b7befd88fc4522d8970864aa92b9a15add517320bb013491a229ba913fcba606fd14b2b8925e40d021055c88178cacab3b2cf5304fe381d3659f210592d8286c54e0c8d1c0b8d1f359c340295c5cbb91ee797f420f99bc5be0a6b99c462d31ac0518cbd57e05a12669e05fc007da3203572cb64948b8b743970d511177f20fd29f3f931759846c1d608120a1976275cfa0f302c3849c3f7dbb2ed7d5f0ac680ae2a33ebb9757b2b679522fbf8513a233891d556341b449d30b445e165acb7aab233be10a482ac33d5f"}, 0xe2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x7f, 0xed, "735c009590baef8f"}}}, 0x10) [ 413.050818][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.058546][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.066222][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.074032][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.081752][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.089477][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.097156][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:11 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "8995b77c18e5ed02701c0504599a7269cf835985c62f5047afba8308e5a53299e91edfd4d3277d3e4bce7bb41c6f871668bb77e2bdfecd641e0130dd428a9984", 0x2c}, 0x48, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r3, 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000340)="b0", 0x1, 0xfffffffffffffffd) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) keyctl$negate(0xd, r5, 0x98f, r0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="024b176a71aa728e8e24dc1750398fe8a7c900da00d6"], 0xdf) [ 413.105470][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.113189][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.120996][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.128757][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.136423][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.144386][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) 19:55:11 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x4) 19:55:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (rerun: 64) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000280)=""/4096) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r3) (async, rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) (async, rerun: 64) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r0, r0, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001400), 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25020000000c00060003000000000000000c00078008000100", @ANYRES32=r4, @ANYBLOB="2400078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00050020ecae6401f7c0f1"], 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x90) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) [ 413.152121][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.159837][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.167550][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.175220][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.182935][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.190645][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.198347][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000780)="14000000520007f3000000000000000000000000ab0ba95b134fcf658ca141ca69753eec32d8aae6c9e627fe32d0b3260387f8c1017c1c44102f28d3e6dfa5aa997a848e4a8b1a454fbf12ee7cdd36265ff287ebd4f754b4e91eb7d02caf027a5c612c9c9bcae49e660b21ad5c", 0x6d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0xe000, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0x3, 0x9, 0x9}, 0x3b, [0xfffffffd, 0x9, 0x80000000, 0x200000, 0x40, 0x1, 0x29, 0x8, 0x0, 0x86e, 0x800, 0x80000001, 0x1f, 0x0, 0xceb, 0x8, 0x7, 0x77, 0x1, 0xef8, 0x401, 0x2, 0x1f, 0xfffffffe, 0x7f, 0x8, 0x1, 0x4, 0x7, 0x6, 0x5b57, 0x80000001, 0xa4c0, 0xe3a, 0x80, 0x800, 0xfda, 0x2, 0x8, 0x80000001, 0x5, 0x1f, 0x81, 0x40, 0x8, 0x87, 0x7fff, 0x401, 0x3, 0x80000, 0x775, 0x6, 0x0, 0xfffffd26, 0x8, 0x9, 0x80000000, 0x1, 0x9, 0x2, 0xfff, 0xeb, 0x9, 0xf6], [0x67d4, 0x6, 0xd2, 0x6, 0x7fff, 0x80000000, 0x1, 0x1f, 0x2, 0x7, 0x0, 0xc29b, 0x8000, 0x8, 0x9, 0x1, 0x2, 0x1, 0x1ef000, 0x2, 0x2, 0xffffff01, 0x4, 0xfffffffa, 0x2bb5fdb5, 0xb48, 0xe7fe, 0x3, 0x10001, 0x5, 0x6, 0x3f, 0x6, 0x1ad5, 0x8001, 0x77, 0x7, 0x0, 0x562c, 0x8, 0x81, 0xb7c, 0x9, 0x100, 0x9, 0x800, 0x1b, 0x8, 0x8, 0x80000001, 0x7, 0x1, 0x3, 0x74b7125c, 0x5, 0x3, 0x80, 0x8, 0x66, 0x7, 0x0, 0x1f, 0x2, 0xfffffff8], [0x9, 0x8, 0x3, 0x0, 0x7a7f, 0x20, 0x5, 0x8, 0x3, 0x8, 0x8, 0x20, 0x81, 0x8, 0x3ff, 0x4, 0x3, 0x0, 0xc6d0, 0xffffffff, 0x10001, 0x0, 0xcbf, 0x5, 0x2b, 0x9, 0x8, 0x7, 0x81, 0x62011837, 0x20, 0xfcb8, 0x9, 0x10000, 0xdc8, 0x5, 0x4, 0x9, 0x1000, 0x7, 0x0, 0x3, 0x9, 0x9, 0x5, 0xefffffff, 0x6, 0x46, 0x4, 0x7, 0x3, 0x3ff, 0xfff, 0x0, 0x200, 0x0, 0x5, 0x10000, 0x4, 0x6, 0x2, 0x49, 0x4, 0xfffffffa], [0x1, 0x3ff, 0x0, 0xfff, 0x3, 0x2, 0x955, 0x5, 0xffffdec6, 0x40, 0x43e43565, 0x7, 0x8001, 0x2, 0x9, 0x0, 0x8, 0x6, 0x3ff, 0x0, 0x7, 0x35d, 0x9, 0xffff, 0x1, 0x2b, 0xff, 0x5, 0x0, 0x400000, 0x0, 0x1, 0x1, 0xb6c, 0x1, 0x9fe2, 0x1, 0x4, 0xffff, 0x7, 0x731, 0x8000, 0xc9f9, 0xffffffff, 0x4, 0x2, 0x5, 0x0, 0x1ff, 0x3, 0x696e, 0x6, 0xd2, 0x1f7, 0x5, 0x3, 0x4, 0x100000, 0x68, 0x2cb, 0x81, 0x63, 0x102000]}, 0x45c) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltclass={0x50, 0x29, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0xc}, {0xe, 0xe}, {0x1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0xf018716bc701e5a0}, 0x80) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRES16=r0], 0x11) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="e7130602c9001f1f00"], 0x9) [ 413.206691][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.214491][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.222197][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.229928][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.237674][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.245356][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:11 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x4) (async) 19:55:11 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x2, @any, "e42facd1ad352ceae11dbc4f4aab4e7e8c1a1980fca5321513f16f8a2ea8d82ce919ae1ff2ca9c328964ca1d43ae2b08603e014fc92eb53c39d724f7b90c9eb065025cfb1d28bcec117816f49c2adff300fa518e66d31e707f8b172c88955594a501f1ae677f8f74a50f7b7d4120bc51cfe99f9cd56352e4d0a750f2d1e2098b9a0756dea012812e21d25754516641e8585e3c3f09c76e89455cbe4a7b71658ce21712981b8b463d9379f7227588a84e67aecae4d1874d9e8fa7f405aca394448637c1b49bc0f62a5147100c89138795bab3a3ea332b39e878a1b0911a192de6ae3e213ea3b7076dbc78f55f2d54db702857675492a75d25"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x44}, "31febd3dcb143ce922d3a5c81bf637f80fe23ae2438ad91d5f8da34c8c1281ca6e28ed3e55976099d10a8a55a9ab81e8a917c900a01468600854d6b076c66fce83b7ebe5"}, 0x48) (async) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xde}, "6637c0bf1edb64f4b54046eda32130c0e736bec493b7befd88fc4522d8970864aa92b9a15add517320bb013491a229ba913fcba606fd14b2b8925e40d021055c88178cacab3b2cf5304fe381d3659f210592d8286c54e0c8d1c0b8d1f359c340295c5cbb91ee797f420f99bc5be0a6b99c462d31ac0518cbd57e05a12669e05fc007da3203572cb64948b8b743970d511177f20fd29f3f931759846c1d608120a1976275cfa0f302c3849c3f7dbb2ed7d5f0ac680ae2a33ebb9757b2b679522fbf8513a233891d556341b449d30b445e165acb7aab233be10a482ac33d5f"}, 0xe2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x7f, 0xed, "735c009590baef8f"}}}, 0x10) [ 413.253122][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.260856][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.268598][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.276270][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.284026][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.291756][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) [ 413.304143][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.308745][ T5127] Bluetooth: hci1: ACL packet for unknown connection handle 1867 [ 413.312395][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.327255][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.335005][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.342742][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.350452][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:12 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "8995b77c18e5ed02701c0504599a7269cf835985c62f5047afba8308e5a53299e91edfd4d3277d3e4bce7bb41c6f871668bb77e2bdfecd641e0130dd428a9984", 0x2c}, 0x48, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r3, 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000340)="b0", 0x1, 0xfffffffffffffffd) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) keyctl$negate(0xd, r5, 0x98f, r0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="024b176a71aa728e8e24dc1750398fe8a7c900da00d6"], 0xdf) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "8995b77c18e5ed02701c0504599a7269cf835985c62f5047afba8308e5a53299e91edfd4d3277d3e4bce7bb41c6f871668bb77e2bdfecd641e0130dd428a9984", 0x2c}, 0x48, 0xfffffffffffffffa) (async) keyctl$unlink(0x9, 0x0, r0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) (async) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r3) (async) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r3, 0x0) (async) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000340)="b0", 0x1, 0xfffffffffffffffd) (async) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) (async) keyctl$negate(0xd, r5, 0x98f, r0) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="024b176a71aa728e8e24dc1750398fe8a7c900da00d6"], 0xdf) (async) [ 413.358180][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.365844][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.373624][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.381353][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.389071][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.396748][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.404468][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.412939][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.420678][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.428374][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.436040][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.443752][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.451557][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.460607][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.468331][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.475999][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.483727][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.491440][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.499146][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x3e}, @l2cap_cid_signaling={{0x3a}, [@l2cap_conf_req={{0x4, 0xe1, 0x1e}, {0x12, 0x3, [@l2cap_conf_mtu={0x1, 0x2, 0x3f}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x1, 0x7, 0xffff44fb, 0x2, 0x52}}, @l2cap_conf_mtu={0x1, 0x2, 0x4}]}}, @l2cap_disconn_rsp={{0x7, 0xd8, 0x4}, {0x9, 0x7}}, @l2cap_create_chan_req={{0xc, 0x74, 0x5}, {0xbda9, 0x401, 0x93}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x8, 0x3f}}]}}, 0x43) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) 19:55:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000780)="14000000520007f3000000000000000000000000ab0ba95b134fcf658ca141ca69753eec32d8aae6c9e627fe32d0b3260387f8c1017c1c44102f28d3e6dfa5aa997a848e4a8b1a454fbf12ee7cdd36265ff287ebd4f754b4e91eb7d02caf027a5c612c9c9bcae49e660b21ad5c", 0x6d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x30) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0xe000, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0x3, 0x9, 0x9}, 0x3b, [0xfffffffd, 0x9, 0x80000000, 0x200000, 0x40, 0x1, 0x29, 0x8, 0x0, 0x86e, 0x800, 0x80000001, 0x1f, 0x0, 0xceb, 0x8, 0x7, 0x77, 0x1, 0xef8, 0x401, 0x2, 0x1f, 0xfffffffe, 0x7f, 0x8, 0x1, 0x4, 0x7, 0x6, 0x5b57, 0x80000001, 0xa4c0, 0xe3a, 0x80, 0x800, 0xfda, 0x2, 0x8, 0x80000001, 0x5, 0x1f, 0x81, 0x40, 0x8, 0x87, 0x7fff, 0x401, 0x3, 0x80000, 0x775, 0x6, 0x0, 0xfffffd26, 0x8, 0x9, 0x80000000, 0x1, 0x9, 0x2, 0xfff, 0xeb, 0x9, 0xf6], [0x67d4, 0x6, 0xd2, 0x6, 0x7fff, 0x80000000, 0x1, 0x1f, 0x2, 0x7, 0x0, 0xc29b, 0x8000, 0x8, 0x9, 0x1, 0x2, 0x1, 0x1ef000, 0x2, 0x2, 0xffffff01, 0x4, 0xfffffffa, 0x2bb5fdb5, 0xb48, 0xe7fe, 0x3, 0x10001, 0x5, 0x6, 0x3f, 0x6, 0x1ad5, 0x8001, 0x77, 0x7, 0x0, 0x562c, 0x8, 0x81, 0xb7c, 0x9, 0x100, 0x9, 0x800, 0x1b, 0x8, 0x8, 0x80000001, 0x7, 0x1, 0x3, 0x74b7125c, 0x5, 0x3, 0x80, 0x8, 0x66, 0x7, 0x0, 0x1f, 0x2, 0xfffffff8], [0x9, 0x8, 0x3, 0x0, 0x7a7f, 0x20, 0x5, 0x8, 0x3, 0x8, 0x8, 0x20, 0x81, 0x8, 0x3ff, 0x4, 0x3, 0x0, 0xc6d0, 0xffffffff, 0x10001, 0x0, 0xcbf, 0x5, 0x2b, 0x9, 0x8, 0x7, 0x81, 0x62011837, 0x20, 0xfcb8, 0x9, 0x10000, 0xdc8, 0x5, 0x4, 0x9, 0x1000, 0x7, 0x0, 0x3, 0x9, 0x9, 0x5, 0xefffffff, 0x6, 0x46, 0x4, 0x7, 0x3, 0x3ff, 0xfff, 0x0, 0x200, 0x0, 0x5, 0x10000, 0x4, 0x6, 0x2, 0x49, 0x4, 0xfffffffa], [0x1, 0x3ff, 0x0, 0xfff, 0x3, 0x2, 0x955, 0x5, 0xffffdec6, 0x40, 0x43e43565, 0x7, 0x8001, 0x2, 0x9, 0x0, 0x8, 0x6, 0x3ff, 0x0, 0x7, 0x35d, 0x9, 0xffff, 0x1, 0x2b, 0xff, 0x5, 0x0, 0x400000, 0x0, 0x1, 0x1, 0xb6c, 0x1, 0x9fe2, 0x1, 0x4, 0xffff, 0x7, 0x731, 0x8000, 0xc9f9, 0xffffffff, 0x4, 0x2, 0x5, 0x0, 0x1ff, 0x3, 0x696e, 0x6, 0xd2, 0x1f7, 0x5, 0x3, 0x4, 0x100000, 0x68, 0x2cb, 0x81, 0x63, 0x102000]}, 0x45c) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltclass={0x50, 0x29, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0xc}, {0xe, 0xe}, {0x1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0xf018716bc701e5a0}, 0x80) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRES16=r0], 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="e7130602c9001f1f00"], 0x9) 19:55:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x8, 0x1a}, {0x1, 0x101, 0x5, 0xd79, [0x1, 0x81, 0x5, 0x200, 0x401, 0x80, 0x0, 0xa209, 0x8000]}}}}, 0x27) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) 19:55:12 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x4) 19:55:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) (async) [ 413.506817][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.515177][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 413.522927][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x3e}, @l2cap_cid_signaling={{0x3a}, [@l2cap_conf_req={{0x4, 0xe1, 0x1e}, {0x12, 0x3, [@l2cap_conf_mtu={0x1, 0x2, 0x3f}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x1, 0x7, 0xffff44fb, 0x2, 0x52}}, @l2cap_conf_mtu={0x1, 0x2, 0x4}]}}, @l2cap_disconn_rsp={{0x7, 0xd8, 0x4}, {0x9, 0x7}}, @l2cap_create_chan_req={{0xc, 0x74, 0x5}, {0xbda9, 0x401, 0x93}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x8, 0x3f}}]}}, 0x43) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) 19:55:12 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "8995b77c18e5ed02701c0504599a7269cf835985c62f5047afba8308e5a53299e91edfd4d3277d3e4bce7bb41c6f871668bb77e2bdfecd641e0130dd428a9984", 0x2c}, 0x48, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) (async) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r3, 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000340)="b0", 0x1, 0xfffffffffffffffd) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) (async) keyctl$negate(0xd, r5, 0x98f, r0) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="024b176a71aa728e8e24dc1750398fe8a7c900da00d6"], 0xdf) [ 413.554853][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 1867 [ 413.576102][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.590739][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x8, 0x1a}, {0x1, 0x101, 0x5, 0xd79, [0x1, 0x81, 0x5, 0x200, 0x401, 0x80, 0x0, 0xa209, 0x8000]}}}}, 0x27) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) 19:55:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000780)="14000000520007f3000000000000000000000000ab0ba95b134fcf658ca141ca69753eec32d8aae6c9e627fe32d0b3260387f8c1017c1c44102f28d3e6dfa5aa997a848e4a8b1a454fbf12ee7cdd36265ff287ebd4f754b4e91eb7d02caf027a5c612c9c9bcae49e660b21ad5c", 0x6d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0xe000, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0x3, 0x9, 0x9}, 0x3b, [0xfffffffd, 0x9, 0x80000000, 0x200000, 0x40, 0x1, 0x29, 0x8, 0x0, 0x86e, 0x800, 0x80000001, 0x1f, 0x0, 0xceb, 0x8, 0x7, 0x77, 0x1, 0xef8, 0x401, 0x2, 0x1f, 0xfffffffe, 0x7f, 0x8, 0x1, 0x4, 0x7, 0x6, 0x5b57, 0x80000001, 0xa4c0, 0xe3a, 0x80, 0x800, 0xfda, 0x2, 0x8, 0x80000001, 0x5, 0x1f, 0x81, 0x40, 0x8, 0x87, 0x7fff, 0x401, 0x3, 0x80000, 0x775, 0x6, 0x0, 0xfffffd26, 0x8, 0x9, 0x80000000, 0x1, 0x9, 0x2, 0xfff, 0xeb, 0x9, 0xf6], [0x67d4, 0x6, 0xd2, 0x6, 0x7fff, 0x80000000, 0x1, 0x1f, 0x2, 0x7, 0x0, 0xc29b, 0x8000, 0x8, 0x9, 0x1, 0x2, 0x1, 0x1ef000, 0x2, 0x2, 0xffffff01, 0x4, 0xfffffffa, 0x2bb5fdb5, 0xb48, 0xe7fe, 0x3, 0x10001, 0x5, 0x6, 0x3f, 0x6, 0x1ad5, 0x8001, 0x77, 0x7, 0x0, 0x562c, 0x8, 0x81, 0xb7c, 0x9, 0x100, 0x9, 0x800, 0x1b, 0x8, 0x8, 0x80000001, 0x7, 0x1, 0x3, 0x74b7125c, 0x5, 0x3, 0x80, 0x8, 0x66, 0x7, 0x0, 0x1f, 0x2, 0xfffffff8], [0x9, 0x8, 0x3, 0x0, 0x7a7f, 0x20, 0x5, 0x8, 0x3, 0x8, 0x8, 0x20, 0x81, 0x8, 0x3ff, 0x4, 0x3, 0x0, 0xc6d0, 0xffffffff, 0x10001, 0x0, 0xcbf, 0x5, 0x2b, 0x9, 0x8, 0x7, 0x81, 0x62011837, 0x20, 0xfcb8, 0x9, 0x10000, 0xdc8, 0x5, 0x4, 0x9, 0x1000, 0x7, 0x0, 0x3, 0x9, 0x9, 0x5, 0xefffffff, 0x6, 0x46, 0x4, 0x7, 0x3, 0x3ff, 0xfff, 0x0, 0x200, 0x0, 0x5, 0x10000, 0x4, 0x6, 0x2, 0x49, 0x4, 0xfffffffa], [0x1, 0x3ff, 0x0, 0xfff, 0x3, 0x2, 0x955, 0x5, 0xffffdec6, 0x40, 0x43e43565, 0x7, 0x8001, 0x2, 0x9, 0x0, 0x8, 0x6, 0x3ff, 0x0, 0x7, 0x35d, 0x9, 0xffff, 0x1, 0x2b, 0xff, 0x5, 0x0, 0x400000, 0x0, 0x1, 0x1, 0xb6c, 0x1, 0x9fe2, 0x1, 0x4, 0xffff, 0x7, 0x731, 0x8000, 0xc9f9, 0xffffffff, 0x4, 0x2, 0x5, 0x0, 0x1ff, 0x3, 0x696e, 0x6, 0xd2, 0x1f7, 0x5, 0x3, 0x4, 0x100000, 0x68, 0x2cb, 0x81, 0x63, 0x102000]}, 0x45c) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltclass={0x50, 0x29, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0xc}, {0xe, 0xe}, {0x1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0xf018716bc701e5a0}, 0x80) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRES16=r0], 0x11) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="e7130602c9001f1f00"], 0x9) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000780)="14000000520007f3000000000000000000000000ab0ba95b134fcf658ca141ca69753eec32d8aae6c9e627fe32d0b3260387f8c1017c1c44102f28d3e6dfa5aa997a848e4a8b1a454fbf12ee7cdd36265ff287ebd4f754b4e91eb7d02caf027a5c612c9c9bcae49e660b21ad5c", 0x6d) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x30) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0xe000, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_getnetconf={0x1c, 0x52, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) (async) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0x3, 0x9, 0x9}, 0x3b, [0xfffffffd, 0x9, 0x80000000, 0x200000, 0x40, 0x1, 0x29, 0x8, 0x0, 0x86e, 0x800, 0x80000001, 0x1f, 0x0, 0xceb, 0x8, 0x7, 0x77, 0x1, 0xef8, 0x401, 0x2, 0x1f, 0xfffffffe, 0x7f, 0x8, 0x1, 0x4, 0x7, 0x6, 0x5b57, 0x80000001, 0xa4c0, 0xe3a, 0x80, 0x800, 0xfda, 0x2, 0x8, 0x80000001, 0x5, 0x1f, 0x81, 0x40, 0x8, 0x87, 0x7fff, 0x401, 0x3, 0x80000, 0x775, 0x6, 0x0, 0xfffffd26, 0x8, 0x9, 0x80000000, 0x1, 0x9, 0x2, 0xfff, 0xeb, 0x9, 0xf6], [0x67d4, 0x6, 0xd2, 0x6, 0x7fff, 0x80000000, 0x1, 0x1f, 0x2, 0x7, 0x0, 0xc29b, 0x8000, 0x8, 0x9, 0x1, 0x2, 0x1, 0x1ef000, 0x2, 0x2, 0xffffff01, 0x4, 0xfffffffa, 0x2bb5fdb5, 0xb48, 0xe7fe, 0x3, 0x10001, 0x5, 0x6, 0x3f, 0x6, 0x1ad5, 0x8001, 0x77, 0x7, 0x0, 0x562c, 0x8, 0x81, 0xb7c, 0x9, 0x100, 0x9, 0x800, 0x1b, 0x8, 0x8, 0x80000001, 0x7, 0x1, 0x3, 0x74b7125c, 0x5, 0x3, 0x80, 0x8, 0x66, 0x7, 0x0, 0x1f, 0x2, 0xfffffff8], [0x9, 0x8, 0x3, 0x0, 0x7a7f, 0x20, 0x5, 0x8, 0x3, 0x8, 0x8, 0x20, 0x81, 0x8, 0x3ff, 0x4, 0x3, 0x0, 0xc6d0, 0xffffffff, 0x10001, 0x0, 0xcbf, 0x5, 0x2b, 0x9, 0x8, 0x7, 0x81, 0x62011837, 0x20, 0xfcb8, 0x9, 0x10000, 0xdc8, 0x5, 0x4, 0x9, 0x1000, 0x7, 0x0, 0x3, 0x9, 0x9, 0x5, 0xefffffff, 0x6, 0x46, 0x4, 0x7, 0x3, 0x3ff, 0xfff, 0x0, 0x200, 0x0, 0x5, 0x10000, 0x4, 0x6, 0x2, 0x49, 0x4, 0xfffffffa], [0x1, 0x3ff, 0x0, 0xfff, 0x3, 0x2, 0x955, 0x5, 0xffffdec6, 0x40, 0x43e43565, 0x7, 0x8001, 0x2, 0x9, 0x0, 0x8, 0x6, 0x3ff, 0x0, 0x7, 0x35d, 0x9, 0xffff, 0x1, 0x2b, 0xff, 0x5, 0x0, 0x400000, 0x0, 0x1, 0x1, 0xb6c, 0x1, 0x9fe2, 0x1, 0x4, 0xffff, 0x7, 0x731, 0x8000, 0xc9f9, 0xffffffff, 0x4, 0x2, 0x5, 0x0, 0x1ff, 0x3, 0x696e, 0x6, 0xd2, 0x1f7, 0x5, 0x3, 0x4, 0x100000, 0x68, 0x2cb, 0x81, 0x63, 0x102000]}, 0x45c) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltclass={0x50, 0x29, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0xc}, {0xe, 0xe}, {0x1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0xf018716bc701e5a0}, 0x80) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRES16=r0], 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="e7130602c9001f1f00"], 0x9) (async) 19:55:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000140)=0x5) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:12 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xae}, "89b66d51e55325442f47dca7238efdc323cf87ab1dc90fd94581b121e637ac9e100b748e5c0bbc06e2341479c6f69d20718265984e0160f973b350805464af476925fc6cd33038b8216ead30f4171a7b116f0bfc9b93436dc35add54f1f979d970c055196530eec85c4d6dbdf121731d4878ae48e23348eca0fda037a60a92b4462875b8a66524e237e1f0e3a0e1c049efdcdef6c8ab129cb0c2b4f3b2f38492312a7b3b39d4e9e581c64a77fd91"}, 0xb2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 413.666592][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 413.684828][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 1867 [ 413.702732][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:12 executing program 0: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0200d6"], 0xdf) 19:55:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x3e}, @l2cap_cid_signaling={{0x3a}, [@l2cap_conf_req={{0x4, 0xe1, 0x1e}, {0x12, 0x3, [@l2cap_conf_mtu={0x1, 0x2, 0x3f}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x1, 0x7, 0xffff44fb, 0x2, 0x52}}, @l2cap_conf_mtu={0x1, 0x2, 0x4}]}}, @l2cap_disconn_rsp={{0x7, 0xd8, 0x4}, {0x9, 0x7}}, @l2cap_create_chan_req={{0xc, 0x74, 0x5}, {0xbda9, 0x401, 0x93}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x8, 0x3f}}]}}, 0x43) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) [ 413.710474][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.719145][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.726843][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.734684][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.742433][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.750223][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.758133][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.765815][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.773563][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.781320][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.789033][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.796713][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.804440][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000140)=0x5) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 413.812192][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.820566][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.828296][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.835985][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.843719][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.851448][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.859178][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:12 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xae}, "89b66d51e55325442f47dca7238efdc323cf87ab1dc90fd94581b121e637ac9e100b748e5c0bbc06e2341479c6f69d20718265984e0160f973b350805464af476925fc6cd33038b8216ead30f4171a7b116f0bfc9b93436dc35add54f1f979d970c055196530eec85c4d6dbdf121731d4878ae48e23348eca0fda037a60a92b4462875b8a66524e237e1f0e3a0e1c049efdcdef6c8ab129cb0c2b4f3b2f38492312a7b3b39d4e9e581c64a77fd91"}, 0xb2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xae}, "89b66d51e55325442f47dca7238efdc323cf87ab1dc90fd94581b121e637ac9e100b748e5c0bbc06e2341479c6f69d20718265984e0160f973b350805464af476925fc6cd33038b8216ead30f4171a7b116f0bfc9b93436dc35add54f1f979d970c055196530eec85c4d6dbdf121731d4878ae48e23348eca0fda037a60a92b4462875b8a66524e237e1f0e3a0e1c049efdcdef6c8ab129cb0c2b4f3b2f38492312a7b3b39d4e9e581c64a77fd91"}, 0xb2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:12 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x8, 0x1a}, {0x1, 0x101, 0x5, 0xd79, [0x1, 0x81, 0x5, 0x200, 0x401, 0x80, 0x0, 0xa209, 0x8000]}}}}, 0x27) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) 19:55:12 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_io_uring_setup(0x4a52, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90049eac6523505b19e71228bf62140965b5915b0107004000001020005091c0000040300ff7f040903e07f0200070019001009040000003a000c09050003000200"/78], 0x4e) [ 413.866857][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.874578][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.878468][ T5127] Bluetooth: hci1: ACL packet for unknown connection handle 1536 [ 413.882287][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.893037][ T5127] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 413.897618][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.897659][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.897696][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.897733][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.897770][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.897806][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.897842][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:12 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) 19:55:12 executing program 0: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) (async) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0200d6"], 0xdf) [ 413.897878][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.974734][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.982499][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.990245][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 413.997994][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.005665][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.013802][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.022094][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.029823][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.037526][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.037883][ T5127] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 414.045176][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.060533][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:12 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xae}, "89b66d51e55325442f47dca7238efdc323cf87ab1dc90fd94581b121e637ac9e100b748e5c0bbc06e2341479c6f69d20718265984e0160f973b350805464af476925fc6cd33038b8216ead30f4171a7b116f0bfc9b93436dc35add54f1f979d970c055196530eec85c4d6dbdf121731d4878ae48e23348eca0fda037a60a92b4462875b8a66524e237e1f0e3a0e1c049efdcdef6c8ab129cb0c2b4f3b2f38492312a7b3b39d4e9e581c64a77fd91"}, 0xb2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xae}, "89b66d51e55325442f47dca7238efdc323cf87ab1dc90fd94581b121e637ac9e100b748e5c0bbc06e2341479c6f69d20718265984e0160f973b350805464af476925fc6cd33038b8216ead30f4171a7b116f0bfc9b93436dc35add54f1f979d970c055196530eec85c4d6dbdf121731d4878ae48e23348eca0fda037a60a92b4462875b8a66524e237e1f0e3a0e1c049efdcdef6c8ab129cb0c2b4f3b2f38492312a7b3b39d4e9e581c64a77fd91"}, 0xb2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 19:55:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "4f2b44c47c3a6ab2e538c00ddc887cb8547d7de04f79dbe2ee3367b637f2070170d11ebfd598337a09fa9d3790d8f0dc809b1af9840f8f166ab25abfc3412940c0bdd53940b1d6ecbb83d4f17633ac363b2d8b957385fd8152e6e10fae9a1134081041598af224c8dc3559e37bc7512941f12eed0ee91e1882b02da6fc4688b56e70439d"}, 0x88) 19:55:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000140)=0x5) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 414.068267][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.075939][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.083813][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.091515][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.099264][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.106944][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.114697][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.122443][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.130795][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.131348][ T5127] Bluetooth: hci1: ACL packet for unknown connection handle 1536 [ 414.138485][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.138525][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.138562][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.138606][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.170539][ T5127] Bluetooth: hci2: command 0x0409 tx timeout [ 414.176927][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.190625][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.198323][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.205980][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:12 executing program 0: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0200d6"], 0xdf) 19:55:12 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) [ 414.213708][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.221417][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.234359][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.242088][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.249818][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 414.257562][ T5118] Bluetooth: hci4: ACL packet for unknown connection handle 200 19:55:12 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x4a52, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x4a52, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90049eac6523505b19e71228bf62140965b5915b0107004000001020005091c0000040300ff7f040903e07f0200070019001009040000003a000c09050003000200"/78], 0x4e) 19:55:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "4f2b44c47c3a6ab2e538c00ddc887cb8547d7de04f79dbe2ee3367b637f2070170d11ebfd598337a09fa9d3790d8f0dc809b1af9840f8f166ab25abfc3412940c0bdd53940b1d6ecbb83d4f17633ac363b2d8b957385fd8152e6e10fae9a1134081041598af224c8dc3559e37bc7512941f12eed0ee91e1882b02da6fc4688b56e70439d"}, 0x88) 19:55:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffffff2e117c3a444d77755ea7eafe8f5eff0000003088870000"], 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x5, 0xc8}}}, 0x6) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=[0x41400000, 0x9, 0x81, 0x3, 0x5, 0x1, 0x4, 0x96], &(0x7f00000000c0)=[0x4, 0x3, 0x5, 0x2, 0x4, 0x1, 0x3, 0x4, 0x1, 0x4], 0x2, 0x8}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r0, 0x621f7000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0x4, 0xffffff7f}, @TCA_FQ_PIE_ALPHA={0x8}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x4c}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001280), 0x4000, 0x0) r5 = signalfd(r0, &(0x7f00000012c0)={[0x8ff4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0x2, 0x0, 0x7, 0x9c, 0x8}], &(0x7f0000000200)='GPL\x00', 0x886, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x4, '\x00', r3, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x4, &(0x7f0000001300)=[r5], &(0x7f0000001340)=[{0x1, 0x1, 0x5, 0xa}, {0x0, 0x5, 0x10, 0x9}, {0x3, 0x3, 0x7, 0xc}, {0x4, 0x3, 0x1, 0x6}], 0x10, 0x8}, 0x90) [ 414.265298][ T5118] Bluetooth: hci4: command 0x0409 tx timeout 19:55:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c003000000000000007a07e6bbb434ebe452e8f24b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b37503664090dde5a37a513035c54eb1775d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5da07f8695c588cc6baa198ad7225087395dad5d587c0b0fc1ff307fd21166ce40d2205b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c6f0d00004e4a2ef4ac6e69677eb53f15410786f0fcc5b81ea636df30f21bba"], 0x102) 19:55:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c003000000000000007a07e6bbb434ebe452e8f24b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b37503664090dde5a37a513035c54eb1775d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5da07f8695c588cc6baa198ad7225087395dad5d587c0b0fc1ff307fd21166ce40d2205b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c6f0d00004e4a2ef4ac6e69677eb53f15410786f0fcc5b81ea636df30f21bba"], 0x102) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c003000000000000007a07e6bbb434ebe452e8f24b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b37503664090dde5a37a513035c54eb1775d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5da07f8695c588cc6baa198ad7225087395dad5d587c0b0fc1ff307fd21166ce40d2205b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c6f0d00004e4a2ef4ac6e69677eb53f15410786f0fcc5b81ea636df30f21bba"], 0x102) (async) 19:55:13 executing program 5: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) (async) [ 414.321542][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 414.330562][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 414.338492][ T5127] Bluetooth: hci1: ACL packet for unknown connection handle 1536 19:55:13 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200442, 0x42) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) statx(0xffffffffffffffff, &(0x7f0000000780)='.\x00', 0x400, 0x80, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r7, &(0x7f0000000fc0)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)="70e2263e1e136eaa5f0e28ee10fc0d6afabb08cf2cc43dfc17906489ba88137f2a24008d260aa8a80ef900deb3821df04bb2099cefc167918b03de342b4cf041fc8e", 0x42}, {&(0x7f0000000500)="7bfbf4d892350d4dc48d8e2f5bc27a9dfc1a451fcad422214254d79f2731a584c7712c6340b9de836e3ca74ea152919e1524adb97289299d4b5da076eba01f4a34690fa14f12e8f8da21f994c77ce2ed6edaac12e21a86dbedf7ac0993c859f198459c75ebb6ecd521de2132e14446671d2506b7ba0591636545547bdaf42072f1467151491468d06e36bebd4e6a5a2d180aa35f0ba7e5a8197cc4cac42d36238748de75f8abfabd4fb02d1c2259069cd77e1ae693ed36a1188d13d263f831132aefc4a38a9a0d6cbe60dab84d624655e6daf516a82612774373a3d453684b339fd5cdb3fd1d43", 0xe7}, {&(0x7f0000000700)="d00c7cc30aebb5f551b69a04be93fec33a535bce954299d8ef840c873bc4e1c5e47768c23f1b7b7a23cab01c1a864af9ce8ed452715b696916628a8a1e37c44c80bc6d46755b47cb2ee36adbd7404e64064534cf76806b4142c2bc48dc6682", 0x5f}, {&(0x7f0000000600)="392071c56edaa60e38ed257aaff50f536a52a23729d8362821c583382e366f2ff30ee1910cc99983b6dbe63b", 0x2c}, {&(0x7f00000007c0)="e5a7297e5ff96f4a4a2cea9bfe553f0b4fb68664d2a2969ffe3fa090254daf9ec158018c8a9b666c6869287481cfb401ac118667fdebbb7d7508b069176db6db3c8a804c7a7edb7967efcb9bbf1aa37e8d5409ee689384186dca", 0x5a}, {&(0x7f0000000780)}], 0x6}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000280)}, {&(0x7f0000000840)="c56c8fd04df817da759ad000ba525316ee63d0ebd097929213c1f79b1ae00f905fe05033c2af6041510ec27b04a5484e96cabeada7613fc8eb6c515f81ae88b19677c1e91ddac36fc237998715062d9727dc6ea1cb88067fa763043d64f8ff8774059ae0ef2cbfab99ee5ebfe3dba9dec9a825df1603d1712916708f771c6fc92b9415", 0x83}, {&(0x7f0000000e80)="725a66bf0ef1759e7159f8f7f550e0e65297df8cf451f019e0b5d315cba00f6425f5e0de2a335ef268063e4166a6e00000f5f694e47ad784b99d9d3380aac5caf2dd9db20330533c7da711ec236d22f07601ac379fff444eb76d9991cfbf2278914e2d0dc9870adeb985d28cf9be29947a79609a69ea6a0b0a7f71409cc9b814f3f7650cbb030647fa895a", 0x8b}, {&(0x7f0000001040)="5ffa8a6ccd0daefb73c92f8d10ec3843a4478484fb9c5ead41dab0ff2ccd41af9a7bd338e95df11232e65ea18d8fcd103f7f062c733fa638d33d0b52db91e2bafbea4bfc2e780318bc77b5e9a8cc66ac18e2618843558bcebdf0c970d472878f1db4d534cc08c3d668df67273215e3cdaf8be3be21acf1b6045f77be5921be5202050c7ca1b374ba62c47f0ea698e6ceb455828989ef247641f55b494d54dcb48526320b4dec4a47980cfc04b9cf53fffd7a9a975ad80cc632f222105444c9e078bf9c42e5ae4d80b11064ce31030b2b71d0cd576c6a2c7073397c3a2a3ac71f2d163653259efd17", 0xe8}, {&(0x7f0000000c00)="edaca03955d207c941a7463f070bb343783682b029adb47f1fe4a83cff7dfa81b64f70f82a48fbcc38f3c482c5d2078bc18dae0f170c72d86fc8d5df78f475bcb6b2e1628fe4900a6c75bb2d6f57a7dcbe2c0000fefff6c0e92112942901573e5d1bb3d392f07cfce23232c4f6d324daf9dbf2b6cc44b68ae217bd913484c1a5c5e9e53aab518000a6b75e563ba4abc6b1e288370ce771337e696c02c27d8adbd7202a6eb82cca8581607a434febac58f2fbd346d1f969298ab2feee453c5307bdd50888f232e68da0393e6e4749dc4ce980e0867d75dbac975abade9df833f6", 0xe0}, {&(0x7f0000000d00)="1d", 0x1}, {&(0x7f0000000a00)="2fe205d37dd2922e1efdcc40fdb14c1848b93bf3d41e4fc1063c20bc6d7c16697a4224e060c65695fb0a77adcad5bd29d303f299d992af39552d7f35b7ded065363b244054aec76631636715e75ca53bb2332d3192ab800fae079c86fc1645452c5425811e429fe87edf6e001e0edc076d28df52032a4a2aff60a321a4", 0x7d}, {&(0x7f0000000b00)="9cabdfe6f1f117a025a274c560672581c1a9b341e90b393f2aafd1581136dd363b1727f5aaad3d02b2cea498b29788ec29bcd2ce56cbdb17270e0175df5920de9f3ce0f47c5cbd3919ecf93376878f346483b5a17ba0c968ba7c64a22039a1ca33f8e2f56795b4adfbf22bc223eb4c5079e5afc8f4f0e6bf52ef680f70135e346ddeb3112c7fa78aa848afe64f998587fe1fee64d33ece00a8fb192802891461672f64b3dda64e732c741ed5634246393a1cc603f7346b6263a264", 0xbb}, {&(0x7f0000000480)="0f77dfc5da6256c55732a9f847cfb088e58f63b4c59cb68f3fd066777f37d6776b6657762945", 0x26}], 0x9, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r1, r6, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0xd8, 0x4000}}], 0x2, 0x0) fchown(r0, 0xee01, r5) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) 19:55:13 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffffff2e117c3a444d77755ea7eafe8f5eff0000003088870000"], 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x5, 0xc8}}}, 0x6) (async) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=[0x41400000, 0x9, 0x81, 0x3, 0x5, 0x1, 0x4, 0x96], &(0x7f00000000c0)=[0x4, 0x3, 0x5, 0x2, 0x4, 0x1, 0x3, 0x4, 0x1, 0x4], 0x2, 0x8}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r0, 0x621f7000) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0x4, 0xffffff7f}, @TCA_FQ_PIE_ALPHA={0x8}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x4c}}, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001280), 0x4000, 0x0) r5 = signalfd(r0, &(0x7f00000012c0)={[0x8ff4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0x2, 0x0, 0x7, 0x9c, 0x8}], &(0x7f0000000200)='GPL\x00', 0x886, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x4, '\x00', r3, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x4, &(0x7f0000001300)=[r5], &(0x7f0000001340)=[{0x1, 0x1, 0x5, 0xa}, {0x0, 0x5, 0x10, 0x9}, {0x3, 0x3, 0x7, 0xc}, {0x4, 0x3, 0x1, 0x6}], 0x10, 0x8}, 0x90) 19:55:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x84}, "4f2b44c47c3a6ab2e538c00ddc887cb8547d7de04f79dbe2ee3367b637f2070170d11ebfd598337a09fa9d3790d8f0dc809b1af9840f8f166ab25abfc3412940c0bdd53940b1d6ecbb83d4f17633ac363b2d8b957385fd8152e6e10fae9a1134081041598af224c8dc3559e37bc7512941f12eed0ee91e1882b02da6fc4688b56e70439d"}, 0x88) 19:55:13 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffffff2e117c3a444d77755ea7eafe8f5eff0000003088870000"], 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x5, 0xc8}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x5, 0xc8}}}, 0x6) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=[0x41400000, 0x9, 0x81, 0x3, 0x5, 0x1, 0x4, 0x96], &(0x7f00000000c0)=[0x4, 0x3, 0x5, 0x2, 0x4, 0x1, 0x3, 0x4, 0x1, 0x4], 0x2, 0x8}}, 0x40) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r0, 0x621f7000) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0x4, 0xffffff7f}, @TCA_FQ_PIE_ALPHA={0x8}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x4c}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001280), 0x4000, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001280), 0x4000, 0x0) r5 = signalfd(r0, &(0x7f00000012c0)={[0x8ff4]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0x2, 0x0, 0x7, 0x9c, 0x8}], &(0x7f0000000200)='GPL\x00', 0x886, 0x1000, &(0x7f0000000240)=""/4096, 0x41100, 0x4, '\x00', r3, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x4, &(0x7f0000001300)=[r5], &(0x7f0000001340)=[{0x1, 0x1, 0x5, 0xa}, {0x0, 0x5, 0x10, 0x9}, {0x3, 0x3, 0x7, 0xc}, {0x4, 0x3, 0x1, 0x6}], 0x10, 0x8}, 0x90) 19:55:13 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_io_uring_setup(0x4a52, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='.'], 0x118) (async) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90049eac6523505b19e71228bf62140965b5915b0107004000001020005091c0000040300ff7f040903e07f0200070019001009040000003a000c09050003000200"/78], 0x4e) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90049eac6523505b19e71228bf62140965b5915b0107004000001020005091c0000040300ff7f040903e07f0200070019001009040000003a000c09050003000200"/78], 0x4e) 19:55:13 executing program 5: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c003000000000000007a07e6bbb434ebe452e8f24b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b37503664090dde5a37a513035c54eb1775d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5da07f8695c588cc6baa198ad7225087395dad5d587c0b0fc1ff307fd21166ce40d2205b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c6f0d00004e4a2ef4ac6e69677eb53f15410786f0fcc5b81ea636df30f21bba"], 0x102) 19:55:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x78, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x3, @empty, 0x9}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000002c0)=0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) 19:55:13 executing program 5: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) [ 414.613487][ T5127] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:13 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) 19:55:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000546c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r2}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{r2, 0x6, 0x1, 0xfffffffffffffffc, 0xe57, 0x1, 0x244, 0xfe87, 0x4, 0x20, 0x4, 0xffffffffffffffc1, 0x6, 0x4, 0x8}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) 19:55:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x78, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x3, @empty, 0x9}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000002c0)=0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) 19:55:13 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200442, 0x42) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) statx(0xffffffffffffffff, &(0x7f0000000780)='.\x00', 0x400, 0x80, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x0) (async) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r7, &(0x7f0000000fc0)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)="70e2263e1e136eaa5f0e28ee10fc0d6afabb08cf2cc43dfc17906489ba88137f2a24008d260aa8a80ef900deb3821df04bb2099cefc167918b03de342b4cf041fc8e", 0x42}, {&(0x7f0000000500)="7bfbf4d892350d4dc48d8e2f5bc27a9dfc1a451fcad422214254d79f2731a584c7712c6340b9de836e3ca74ea152919e1524adb97289299d4b5da076eba01f4a34690fa14f12e8f8da21f994c77ce2ed6edaac12e21a86dbedf7ac0993c859f198459c75ebb6ecd521de2132e14446671d2506b7ba0591636545547bdaf42072f1467151491468d06e36bebd4e6a5a2d180aa35f0ba7e5a8197cc4cac42d36238748de75f8abfabd4fb02d1c2259069cd77e1ae693ed36a1188d13d263f831132aefc4a38a9a0d6cbe60dab84d624655e6daf516a82612774373a3d453684b339fd5cdb3fd1d43", 0xe7}, {&(0x7f0000000700)="d00c7cc30aebb5f551b69a04be93fec33a535bce954299d8ef840c873bc4e1c5e47768c23f1b7b7a23cab01c1a864af9ce8ed452715b696916628a8a1e37c44c80bc6d46755b47cb2ee36adbd7404e64064534cf76806b4142c2bc48dc6682", 0x5f}, {&(0x7f0000000600)="392071c56edaa60e38ed257aaff50f536a52a23729d8362821c583382e366f2ff30ee1910cc99983b6dbe63b", 0x2c}, {&(0x7f00000007c0)="e5a7297e5ff96f4a4a2cea9bfe553f0b4fb68664d2a2969ffe3fa090254daf9ec158018c8a9b666c6869287481cfb401ac118667fdebbb7d7508b069176db6db3c8a804c7a7edb7967efcb9bbf1aa37e8d5409ee689384186dca", 0x5a}, {&(0x7f0000000780)}], 0x6}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000280)}, {&(0x7f0000000840)="c56c8fd04df817da759ad000ba525316ee63d0ebd097929213c1f79b1ae00f905fe05033c2af6041510ec27b04a5484e96cabeada7613fc8eb6c515f81ae88b19677c1e91ddac36fc237998715062d9727dc6ea1cb88067fa763043d64f8ff8774059ae0ef2cbfab99ee5ebfe3dba9dec9a825df1603d1712916708f771c6fc92b9415", 0x83}, {&(0x7f0000000e80)="725a66bf0ef1759e7159f8f7f550e0e65297df8cf451f019e0b5d315cba00f6425f5e0de2a335ef268063e4166a6e00000f5f694e47ad784b99d9d3380aac5caf2dd9db20330533c7da711ec236d22f07601ac379fff444eb76d9991cfbf2278914e2d0dc9870adeb985d28cf9be29947a79609a69ea6a0b0a7f71409cc9b814f3f7650cbb030647fa895a", 0x8b}, {&(0x7f0000001040)="5ffa8a6ccd0daefb73c92f8d10ec3843a4478484fb9c5ead41dab0ff2ccd41af9a7bd338e95df11232e65ea18d8fcd103f7f062c733fa638d33d0b52db91e2bafbea4bfc2e780318bc77b5e9a8cc66ac18e2618843558bcebdf0c970d472878f1db4d534cc08c3d668df67273215e3cdaf8be3be21acf1b6045f77be5921be5202050c7ca1b374ba62c47f0ea698e6ceb455828989ef247641f55b494d54dcb48526320b4dec4a47980cfc04b9cf53fffd7a9a975ad80cc632f222105444c9e078bf9c42e5ae4d80b11064ce31030b2b71d0cd576c6a2c7073397c3a2a3ac71f2d163653259efd17", 0xe8}, {&(0x7f0000000c00)="edaca03955d207c941a7463f070bb343783682b029adb47f1fe4a83cff7dfa81b64f70f82a48fbcc38f3c482c5d2078bc18dae0f170c72d86fc8d5df78f475bcb6b2e1628fe4900a6c75bb2d6f57a7dcbe2c0000fefff6c0e92112942901573e5d1bb3d392f07cfce23232c4f6d324daf9dbf2b6cc44b68ae217bd913484c1a5c5e9e53aab518000a6b75e563ba4abc6b1e288370ce771337e696c02c27d8adbd7202a6eb82cca8581607a434febac58f2fbd346d1f969298ab2feee453c5307bdd50888f232e68da0393e6e4749dc4ce980e0867d75dbac975abade9df833f6", 0xe0}, {&(0x7f0000000d00)="1d", 0x1}, {&(0x7f0000000a00)="2fe205d37dd2922e1efdcc40fdb14c1848b93bf3d41e4fc1063c20bc6d7c16697a4224e060c65695fb0a77adcad5bd29d303f299d992af39552d7f35b7ded065363b244054aec76631636715e75ca53bb2332d3192ab800fae079c86fc1645452c5425811e429fe87edf6e001e0edc076d28df52032a4a2aff60a321a4", 0x7d}, {&(0x7f0000000b00)="9cabdfe6f1f117a025a274c560672581c1a9b341e90b393f2aafd1581136dd363b1727f5aaad3d02b2cea498b29788ec29bcd2ce56cbdb17270e0175df5920de9f3ce0f47c5cbd3919ecf93376878f346483b5a17ba0c968ba7c64a22039a1ca33f8e2f56795b4adfbf22bc223eb4c5079e5afc8f4f0e6bf52ef680f70135e346ddeb3112c7fa78aa848afe64f998587fe1fee64d33ece00a8fb192802891461672f64b3dda64e732c741ed5634246393a1cc603f7346b6263a264", 0xbb}, {&(0x7f0000000480)="0f77dfc5da6256c55732a9f847cfb088e58f63b4c59cb68f3fd066777f37d6776b6657762945", 0x26}], 0x9, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r1, r6, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0xd8, 0x4000}}], 0x2, 0x0) fchown(r0, 0xee01, r5) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) 19:55:13 executing program 5: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) (async) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:13 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b321582f0d3c61b67be4ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5d280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906"], 0x102) (async) 19:55:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x78, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x3, @empty, 0x9}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000002c0)=0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) 19:55:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) 19:55:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000546c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r2}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x81, "7464fbe08eb369"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{r2, 0x6, 0x1, 0xfffffffffffffffc, 0xe57, 0x1, 0x244, 0xfe87, 0x4, 0x20, 0x4, 0xffffffffffffffc1, 0x6, 0x4, 0x8}}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) [ 415.345000][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:14 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000004ef500000000000000"], 0xf) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "743b0ac8bfe20e65c6ad94445fba08530b751029283f0c1d1d85bc691284ace4be4332bace00c7a6ed3225985ae1bda2b6f9da6cafcf9b2d184c273b6348698e45ab594b0c6d45e4f0949115f343749267c5ceec1494578c0434308ace950f4f55a86713a67884096287de1da927c7cc908f26d586560e16dceb5d49906697eab98f10a6ca21e66ee1103964da7504a68205e7ba8753b0f797e80e970592cb23f116e7d36a92e80304484c1e1f1e580914ce6a6f005bbfd9"}, 0xbc) 19:55:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00ffffffffffaf465c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b1b843ff3c6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d836ffffff7f00000000035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e0c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00"/258], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "5c77d92bbaa019ea5c4498a03da65c2643cd45d2b48fea27c9f1e38fcc01f73a87b0"}, 0x26) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80000aebd5d7c3afceb8c1d6ad116ab223937c835b245b6b8e0f8c190eab5987cadf652578ce64cb363540322cbef1a670ce264c4c0ac63153272396901873bef4545d8a8c3bba4381aea1f95475bd85fcf43"], 0x17) 19:55:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:14 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04020f01e664309a9a4af04000d4620ca942fc59438333fd3121fb7500000100000000000262ea0633559be3ba0000000000000009000083ff571d8eede1852a0000000000"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6e}, "ff2ea3f1f5e42f5935b02fe1e0721f22ff1cf956c1c0c1778eb789df9bafe0e3bbd43741140b5d4c5422c927864386aba080f7564879df6dfba9c98e043d4e630737cb7c5ce07ebd0bfebbe57b89fc385f43d23d7de64d392b712523f85b33207020a63bc6180c02131bf2d2c7a9"}, 0x72) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x2e}, @l2cap_cid_signaling={{0x2a}, [@l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x2, 0xfff}}, @l2cap_conf_req={{0x4, 0x6, 0xf}, {0x2, 0x9, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x54, 0x3, 0x70, 0x6, 0x5}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x2}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0xfffd, 0x4, 0x20}}]}}, 0x33) 19:55:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000546c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r2}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x81, "7464fbe08eb369"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{r2, 0x6, 0x1, 0xfffffffffffffffc, 0xe57, 0x1, 0x244, 0xfe87, 0x4, 0x20, 0x4, 0xffffffffffffffc1, 0x6, 0x4, 0x8}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) 19:55:14 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000004ef500000000000000"], 0xf) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "743b0ac8bfe20e65c6ad94445fba08530b751029283f0c1d1d85bc691284ace4be4332bace00c7a6ed3225985ae1bda2b6f9da6cafcf9b2d184c273b6348698e45ab594b0c6d45e4f0949115f343749267c5ceec1494578c0434308ace950f4f55a86713a67884096287de1da927c7cc908f26d586560e16dceb5d49906697eab98f10a6ca21e66ee1103964da7504a68205e7ba8753b0f797e80e970592cb23f116e7d36a92e80304484c1e1f1e580914ce6a6f005bbfd9"}, 0xbc) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "743b0ac8bfe20e65c6ad94445fba08530b751029283f0c1d1d85bc691284ace4be4332bace00c7a6ed3225985ae1bda2b6f9da6cafcf9b2d184c273b6348698e45ab594b0c6d45e4f0949115f343749267c5ceec1494578c0434308ace950f4f55a86713a67884096287de1da927c7cc908f26d586560e16dceb5d49906697eab98f10a6ca21e66ee1103964da7504a68205e7ba8753b0f797e80e970592cb23f116e7d36a92e80304484c1e1f1e580914ce6a6f005bbfd9"}, 0xbc) [ 415.512670][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 415.568292][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 415.612531][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:14 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200442, 0x42) (async) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async) statx(0xffffffffffffffff, &(0x7f0000000780)='.\x00', 0x400, 0x80, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r7, &(0x7f0000000fc0)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)="70e2263e1e136eaa5f0e28ee10fc0d6afabb08cf2cc43dfc17906489ba88137f2a24008d260aa8a80ef900deb3821df04bb2099cefc167918b03de342b4cf041fc8e", 0x42}, {&(0x7f0000000500)="7bfbf4d892350d4dc48d8e2f5bc27a9dfc1a451fcad422214254d79f2731a584c7712c6340b9de836e3ca74ea152919e1524adb97289299d4b5da076eba01f4a34690fa14f12e8f8da21f994c77ce2ed6edaac12e21a86dbedf7ac0993c859f198459c75ebb6ecd521de2132e14446671d2506b7ba0591636545547bdaf42072f1467151491468d06e36bebd4e6a5a2d180aa35f0ba7e5a8197cc4cac42d36238748de75f8abfabd4fb02d1c2259069cd77e1ae693ed36a1188d13d263f831132aefc4a38a9a0d6cbe60dab84d624655e6daf516a82612774373a3d453684b339fd5cdb3fd1d43", 0xe7}, {&(0x7f0000000700)="d00c7cc30aebb5f551b69a04be93fec33a535bce954299d8ef840c873bc4e1c5e47768c23f1b7b7a23cab01c1a864af9ce8ed452715b696916628a8a1e37c44c80bc6d46755b47cb2ee36adbd7404e64064534cf76806b4142c2bc48dc6682", 0x5f}, {&(0x7f0000000600)="392071c56edaa60e38ed257aaff50f536a52a23729d8362821c583382e366f2ff30ee1910cc99983b6dbe63b", 0x2c}, {&(0x7f00000007c0)="e5a7297e5ff96f4a4a2cea9bfe553f0b4fb68664d2a2969ffe3fa090254daf9ec158018c8a9b666c6869287481cfb401ac118667fdebbb7d7508b069176db6db3c8a804c7a7edb7967efcb9bbf1aa37e8d5409ee689384186dca", 0x5a}, {&(0x7f0000000780)}], 0x6}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000280)}, {&(0x7f0000000840)="c56c8fd04df817da759ad000ba525316ee63d0ebd097929213c1f79b1ae00f905fe05033c2af6041510ec27b04a5484e96cabeada7613fc8eb6c515f81ae88b19677c1e91ddac36fc237998715062d9727dc6ea1cb88067fa763043d64f8ff8774059ae0ef2cbfab99ee5ebfe3dba9dec9a825df1603d1712916708f771c6fc92b9415", 0x83}, {&(0x7f0000000e80)="725a66bf0ef1759e7159f8f7f550e0e65297df8cf451f019e0b5d315cba00f6425f5e0de2a335ef268063e4166a6e00000f5f694e47ad784b99d9d3380aac5caf2dd9db20330533c7da711ec236d22f07601ac379fff444eb76d9991cfbf2278914e2d0dc9870adeb985d28cf9be29947a79609a69ea6a0b0a7f71409cc9b814f3f7650cbb030647fa895a", 0x8b}, {&(0x7f0000001040)="5ffa8a6ccd0daefb73c92f8d10ec3843a4478484fb9c5ead41dab0ff2ccd41af9a7bd338e95df11232e65ea18d8fcd103f7f062c733fa638d33d0b52db91e2bafbea4bfc2e780318bc77b5e9a8cc66ac18e2618843558bcebdf0c970d472878f1db4d534cc08c3d668df67273215e3cdaf8be3be21acf1b6045f77be5921be5202050c7ca1b374ba62c47f0ea698e6ceb455828989ef247641f55b494d54dcb48526320b4dec4a47980cfc04b9cf53fffd7a9a975ad80cc632f222105444c9e078bf9c42e5ae4d80b11064ce31030b2b71d0cd576c6a2c7073397c3a2a3ac71f2d163653259efd17", 0xe8}, {&(0x7f0000000c00)="edaca03955d207c941a7463f070bb343783682b029adb47f1fe4a83cff7dfa81b64f70f82a48fbcc38f3c482c5d2078bc18dae0f170c72d86fc8d5df78f475bcb6b2e1628fe4900a6c75bb2d6f57a7dcbe2c0000fefff6c0e92112942901573e5d1bb3d392f07cfce23232c4f6d324daf9dbf2b6cc44b68ae217bd913484c1a5c5e9e53aab518000a6b75e563ba4abc6b1e288370ce771337e696c02c27d8adbd7202a6eb82cca8581607a434febac58f2fbd346d1f969298ab2feee453c5307bdd50888f232e68da0393e6e4749dc4ce980e0867d75dbac975abade9df833f6", 0xe0}, {&(0x7f0000000d00)="1d", 0x1}, {&(0x7f0000000a00)="2fe205d37dd2922e1efdcc40fdb14c1848b93bf3d41e4fc1063c20bc6d7c16697a4224e060c65695fb0a77adcad5bd29d303f299d992af39552d7f35b7ded065363b244054aec76631636715e75ca53bb2332d3192ab800fae079c86fc1645452c5425811e429fe87edf6e001e0edc076d28df52032a4a2aff60a321a4", 0x7d}, {&(0x7f0000000b00)="9cabdfe6f1f117a025a274c560672581c1a9b341e90b393f2aafd1581136dd363b1727f5aaad3d02b2cea498b29788ec29bcd2ce56cbdb17270e0175df5920de9f3ce0f47c5cbd3919ecf93376878f346483b5a17ba0c968ba7c64a22039a1ca33f8e2f56795b4adfbf22bc223eb4c5079e5afc8f4f0e6bf52ef680f70135e346ddeb3112c7fa78aa848afe64f998587fe1fee64d33ece00a8fb192802891461672f64b3dda64e732c741ed5634246393a1cc603f7346b6263a264", 0xbb}, {&(0x7f0000000480)="0f77dfc5da6256c55732a9f847cfb088e58f63b4c59cb68f3fd066777f37d6776b6657762945", 0x26}], 0x9, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r1, r6, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0xd8, 0x4000}}], 0x2, 0x0) (async) fchown(r0, 0xee01, r5) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) 19:55:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 19:55:14 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000004ef500000000000000"], 0xf) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "743b0ac8bfe20e65c6ad94445fba08530b751029283f0c1d1d85bc691284ace4be4332bace00c7a6ed3225985ae1bda2b6f9da6cafcf9b2d184c273b6348698e45ab594b0c6d45e4f0949115f343749267c5ceec1494578c0434308ace950f4f55a86713a67884096287de1da927c7cc908f26d586560e16dceb5d49906697eab98f10a6ca21e66ee1103964da7504a68205e7ba8753b0f797e80e970592cb23f116e7d36a92e80304484c1e1f1e580914ce6a6f005bbfd9"}, 0xbc) 19:55:14 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04020f01e664309a9a4af04000d4620ca942fc59438333fd3121fb7500000100000000000262ea0633559be3ba0000000000000009000083ff571d8eede1852a0000000000"], 0x12) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6e}, "ff2ea3f1f5e42f5935b02fe1e0721f22ff1cf956c1c0c1778eb789df9bafe0e3bbd43741140b5d4c5422c927864386aba080f7564879df6dfba9c98e043d4e630737cb7c5ce07ebd0bfebbe57b89fc385f43d23d7de64d392b712523f85b33207020a63bc6180c02131bf2d2c7a9"}, 0x72) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x2e}, @l2cap_cid_signaling={{0x2a}, [@l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x2, 0xfff}}, @l2cap_conf_req={{0x4, 0x6, 0xf}, {0x2, 0x9, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x54, 0x3, 0x70, 0x6, 0x5}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x2}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0xfffd, 0x4, 0x20}}]}}, 0x33) 19:55:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00ffffffffffaf465c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b1b843ff3c6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d836ffffff7f00000000035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e0c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00"/258], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "5c77d92bbaa019ea5c4498a03da65c2643cd45d2b48fea27c9f1e38fcc01f73a87b0"}, 0x26) (async) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80000aebd5d7c3afceb8c1d6ad116ab223937c835b245b6b8e0f8c190eab5987cadf652578ce64cb363540322cbef1a670ce264c4c0ac63153272396901873bef4545d8a8c3bba4381aea1f95475bd85fcf43"], 0x17) 19:55:14 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04020f01e664309a9a4af04000d4620ca942fc59438333fd3121fb7500000100000000000262ea0633559be3ba0000000000000009000083ff571d8eede1852a0000000000"], 0x12) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6e}, "ff2ea3f1f5e42f5935b02fe1e0721f22ff1cf956c1c0c1778eb789df9bafe0e3bbd43741140b5d4c5422c927864386aba080f7564879df6dfba9c98e043d4e630737cb7c5ce07ebd0bfebbe57b89fc385f43d23d7de64d392b712523f85b33207020a63bc6180c02131bf2d2c7a9"}, 0x72) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x2e}, @l2cap_cid_signaling={{0x2a}, [@l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x2, 0xfff}}, @l2cap_conf_req={{0x4, 0x6, 0xf}, {0x2, 0x9, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x54, 0x3, 0x70, 0x6, 0x5}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x2}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0xfffd, 0x4, 0x20}}]}}, 0x33) 19:55:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00ffffffffffaf465c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b1b843ff3c6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d836ffffff7f00000000035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e0c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00"/258], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "5c77d92bbaa019ea5c4498a03da65c2643cd45d2b48fea27c9f1e38fcc01f73a87b0"}, 0x26) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80000aebd5d7c3afceb8c1d6ad116ab223937c835b245b6b8e0f8c190eab5987cadf652578ce64cb363540322cbef1a670ce264c4c0ac63153272396901873bef4545d8a8c3bba4381aea1f95475bd85fcf43"], 0x17) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00ffffffffffaf465c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b1b843ff3c6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d836ffffff7f00000000035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e0c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00"/258], 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x22}, "5c77d92bbaa019ea5c4498a03da65c2643cd45d2b48fea27c9f1e38fcc01f73a87b0"}, 0x26) (async) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80000aebd5d7c3afceb8c1d6ad116ab223937c835b245b6b8e0f8c190eab5987cadf652578ce64cb363540322cbef1a670ce264c4c0ac63153272396901873bef4545d8a8c3bba4381aea1f95475bd85fcf43"], 0x17) (async) [ 416.139661][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.153733][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:14 executing program 5: ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0xffffffffffffffff, 0x1, 0x5004) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x9, 0x9}}}}, 0x11) 19:55:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 19:55:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:14 executing program 0: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockname(r0, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80) 19:55:14 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041c1d02aaaac9aaaaaa00000000b8c17acc0d7ed28e78c30000ffffffffffff0000003088870000"], 0x20) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81}}}, 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x61}, "41a836a3a2b3dfe8f190e6c10bc958cd402129f1f39278ef24168848ce9232835f9d431c595c42cc0b357b1f9f1aaa0e912a97e02864ab6ad6d15f0a76e1e58cf67c3217cda5214f5c2a6af413ac1f28553a4c9b502d4e336c2517baee81906b00"}, 0x65) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x6e}, @l2cap_cid_signaling={{0x6a}, [@l2cap_move_chan_cfm={{0x10, 0xff, 0x4}, {0x5, 0xf800}}, @l2cap_conf_rsp={{0x5, 0x6, 0x24}, {0x40, 0x1, 0x4b1a, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0xfff9}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x200, 0x6, 0x8, 0x3}}]}}, @l2cap_conf_rsp={{0x5, 0x3, 0x24}, {0x4, 0xda7, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x3f, 0x1, 0x7, 0x401}}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x4, 0x5, 0x3, 0x8000, 0x9}}, @l2cap_conf_mtu={0x1, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x492e}}, @l2cap_conn_rsp={{0x3, 0x68, 0x8}, {0x5, 0xb4, 0x6, 0x7}}]}}, 0x73) [ 416.243859][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.258171][ T5130] Bluetooth: hci2: command 0x0409 tx timeout [ 416.277255][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 19:55:14 executing program 5: ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0xffffffffffffffff, 0x1, 0x5004) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x9, 0x9}}}}, 0x11) [ 416.286789][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:14 executing program 0: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) (async) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockname(r0, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80) 19:55:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:15 executing program 5: ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0xffffffffffffffff, 0x1, 0x5004) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x9, 0x9}}}}, 0x11) [ 416.327603][ T5130] Bluetooth: hci4: command 0x0409 tx timeout [ 416.366641][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041c1d02aaaac9aaaaaa00000000b8c17acc0d7ed28e78c30000ffffffffffff0000003088870000"], 0x20) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81}}}, 0xd) (rerun: 64) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x61}, "41a836a3a2b3dfe8f190e6c10bc958cd402129f1f39278ef24168848ce9232835f9d431c595c42cc0b357b1f9f1aaa0e912a97e02864ab6ad6d15f0a76e1e58cf67c3217cda5214f5c2a6af413ac1f28553a4c9b502d4e336c2517baee81906b00"}, 0x65) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x6e}, @l2cap_cid_signaling={{0x6a}, [@l2cap_move_chan_cfm={{0x10, 0xff, 0x4}, {0x5, 0xf800}}, @l2cap_conf_rsp={{0x5, 0x6, 0x24}, {0x40, 0x1, 0x4b1a, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0xfff9}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x200, 0x6, 0x8, 0x3}}]}}, @l2cap_conf_rsp={{0x5, 0x3, 0x24}, {0x4, 0xda7, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x3f, 0x1, 0x7, 0x401}}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x4, 0x5, 0x3, 0x8000, 0x9}}, @l2cap_conf_mtu={0x1, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x492e}}, @l2cap_conn_rsp={{0x3, 0x68, 0x8}, {0x5, 0xb4, 0x6, 0x7}}]}}, 0x73) [ 416.374950][ T5118] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.387564][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.402441][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], 0x12) 19:55:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792a3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) 19:55:15 executing program 0: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockname(r0, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80) (async) getsockname(r0, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80) [ 416.432721][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 19:55:15 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0xfff, 0x3}}, @l2cap_conn_req={{0x2, 0xcc, 0x4}, {0x8, 0x401}}]}}, 0x18) 19:55:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 416.529973][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.530062][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.537224][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.544472][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.552709][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 19:55:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], 0x12) [ 416.564076][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.574901][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.582626][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.589814][ T5130] Bluetooth: hci0: unexpected event 0x1c length: 29 > 5 [ 416.601321][ T5130] bt_err_ratelimited: 26 callbacks suppressed [ 416.601332][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 19:55:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) (rerun: 64) 19:55:15 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0xfff, 0x3}}, @l2cap_conn_req={{0x2, 0xcc, 0x4}, {0x8, 0x401}}]}}, 0x18) 19:55:15 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041c1d02aaaac9aaaaaa00000000b8c17acc0d7ed28e78c30000ffffffffffff0000003088870000"], 0x20) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81}}}, 0xd) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x61}, "41a836a3a2b3dfe8f190e6c10bc958cd402129f1f39278ef24168848ce9232835f9d431c595c42cc0b357b1f9f1aaa0e912a97e02864ab6ad6d15f0a76e1e58cf67c3217cda5214f5c2a6af413ac1f28553a4c9b502d4e336c2517baee81906b00"}, 0x65) (rerun: 64) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x6e}, @l2cap_cid_signaling={{0x6a}, [@l2cap_move_chan_cfm={{0x10, 0xff, 0x4}, {0x5, 0xf800}}, @l2cap_conf_rsp={{0x5, 0x6, 0x24}, {0x40, 0x1, 0x4b1a, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0xfff9}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x200, 0x6, 0x8, 0x3}}]}}, @l2cap_conf_rsp={{0x5, 0x3, 0x24}, {0x4, 0xda7, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x3f, 0x1, 0x7, 0x401}}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x4, 0x5, 0x3, 0x8000, 0x9}}, @l2cap_conf_mtu={0x1, 0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x492e}}, @l2cap_conn_rsp={{0x3, 0x68, 0x8}, {0x5, 0xb4, 0x6, 0x7}}]}}, 0x73) (rerun: 32) [ 416.615460][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 19:55:15 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x21}, "da00992f56ca6d76f01198515d9c008739cb3be32f314290ee0c0c6447220e83ad"}, 0x25) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xae, 0x4}, {0x9, 0x7}}}}, 0x11) 19:55:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 19:55:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 416.725103][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 416.725164][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 416.733234][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 416.741016][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 416.748946][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 416.756615][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 19:55:15 executing program 2: r0 = socket(0xa, 0x8000a, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c41625236e93b82912c7f0712fe5dabdf8697172bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00"}}}, 0x102) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="59545eb58f13af669e2f21a9e503f88e6effa84bf1a73457dfcd2436ebc510d747b2a1b56380a08828608902ad80f3f34e4d09025520aa5e01c2ac42bf9ffb003364e4cece45f32267aebeff14eec9ab9b16f42da553646d05f48bb8ed376fe16098ab1b433213a8ecbd956ac71f7ae3a74ace6b01478e476d31baa3cadabd636148f31beda935ebdcb259c49663f2fbd1e2ce38148fcc5940f6e34b5f62bf77329217c1dcb3a95c3e", 0xa9}, 0x1, 0x0, 0x0, 0x90}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@gettaction={0x80, 0x32, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x6, 0x2}, {0x8a83}}}}, 0xf) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x706, 0x800}}}}, 0x11) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) 19:55:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], 0x12) 19:55:15 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0xfff, 0x3}}, @l2cap_conn_req={{0x2, 0xcc, 0x4}, {0x8, 0x401}}]}}, 0x18) 19:55:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010066715f70696500001c00000000050008000600"/52], 0x4c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x13, 0x100, 0x70bd29, 0x25dfdbfc, {0x25, 0x9, 0xe1, 0x3d, {0x4e23, 0x4e22, [0x5e, 0xffffff7f, 0x9, 0x4], [0x1, 0x4, 0x2, 0x8], r3, [0x3ff, 0x81]}, 0x0, 0x8001}, [@INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8e76976110d0f72b4a4b91a70687c0de6dc0c225d3f68523bd34eb21d971c66d143f984b09f68aa2110c576fb96f4d533bc0"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "ad279e8427aa3612c2d84ccd27fbef160a2bc1b343dff42e565f03fec7ad6b9481b55953fe7e693a22ab88120ee000dd017bf7db1ac85a1de5472f4f7d8fa6027a805dbeaea79c0e08d994a25e694672738a190e35a701431af7eca8db8d0486cd87bc600b008105f541902d4de8e86b2b5b2219fe30e060aff18ddf9e0685"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x3ff, 0x220482) ioctl$sock_ifreq(r4, 0x8911, &(0x7f00000003c0)={'wg2\x00', @ifru_settings={0x101, 0xfffffff9, @cisco=&(0x7f0000000300)={0x80000000, 0x1b}}}) [ 416.765009][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 416.772737][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 416.780436][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 416.792295][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.807765][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.815430][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.823193][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.830922][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.838683][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.846364][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.848960][ T5118] Bluetooth: Wrong link type (-57) [ 416.854071][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.859415][ T5118] Bluetooth: hci1: link tx timeout 19:55:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 416.866771][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.879597][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.887260][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.895636][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.903366][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.915426][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 19:55:15 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x21}, "da00992f56ca6d76f01198515d9c008739cb3be32f314290ee0c0c6447220e83ad"}, 0x25) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xae, 0x4}, {0x9, 0x7}}}}, 0x11) [ 416.927412][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.935096][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.942864][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.950605][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.958361][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.966044][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 19:55:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0016000400"/17], 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x6, 0xe}, {0x8001, 0x3ff, 0x8000, 0x75, [0x1f, 0x1, 0xff]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x30}, @l2cap_cid_signaling={{0x2c}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x5, 0x6, 0x8000, 0x7aa8}}, @l2cap_conf_rsp={{0x5, 0xec, 0x1c}, {0x1f, 0x8, 0x3ff, [@l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x7, 0x2215, 0x7f, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}]}}, 0x35) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 416.974069][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.975450][ T5118] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 416.981769][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.981812][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.981850][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 416.981888][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 19:55:15 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) [ 416.981928][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 417.028976][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 417.036659][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 417.044457][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 417.052205][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 417.059973][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 417.067724][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 19:55:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010066715f70696500001c00000000050008000600"/52], 0x4c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x13, 0x100, 0x70bd29, 0x25dfdbfc, {0x25, 0x9, 0xe1, 0x3d, {0x4e23, 0x4e22, [0x5e, 0xffffff7f, 0x9, 0x4], [0x1, 0x4, 0x2, 0x8], r3, [0x3ff, 0x81]}, 0x0, 0x8001}, [@INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8e76976110d0f72b4a4b91a70687c0de6dc0c225d3f68523bd34eb21d971c66d143f984b09f68aa2110c576fb96f4d533bc0"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "ad279e8427aa3612c2d84ccd27fbef160a2bc1b343dff42e565f03fec7ad6b9481b55953fe7e693a22ab88120ee000dd017bf7db1ac85a1de5472f4f7d8fa6027a805dbeaea79c0e08d994a25e694672738a190e35a701431af7eca8db8d0486cd87bc600b008105f541902d4de8e86b2b5b2219fe30e060aff18ddf9e0685"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x3ff, 0x220482) ioctl$sock_ifreq(r4, 0x8911, &(0x7f00000003c0)={'wg2\x00', @ifru_settings={0x101, 0xfffffff9, @cisco=&(0x7f0000000300)={0x80000000, 0x1b}}}) 19:55:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0016000400"/17], 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x6, 0xe}, {0x8001, 0x3ff, 0x8000, 0x75, [0x1f, 0x1, 0xff]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x30}, @l2cap_cid_signaling={{0x2c}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x5, 0x6, 0x8000, 0x7aa8}}, @l2cap_conf_rsp={{0x5, 0xec, 0x1c}, {0x1f, 0x8, 0x3ff, [@l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x7, 0x2215, 0x7f, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}]}}, 0x35) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0016000400"/17], 0x11) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x6, 0xe}, {0x8001, 0x3ff, 0x8000, 0x75, [0x1f, 0x1, 0xff]}}}}, 0x1b) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x30}, @l2cap_cid_signaling={{0x2c}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x5, 0x6, 0x8000, 0x7aa8}}, @l2cap_conf_rsp={{0x5, 0xec, 0x1c}, {0x1f, 0x8, 0x3ff, [@l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x7, 0x2215, 0x7f, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}]}}, 0x35) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 19:55:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:15 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x21}, "da00992f56ca6d76f01198515d9c008739cb3be32f314290ee0c0c6447220e83ad"}, 0x25) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xae, 0x4}, {0x9, 0x7}}}}, 0x11) [ 417.075527][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 417.094720][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 417.102788][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.112648][ T5130] Bluetooth: Wrong link type (-57) [ 417.117942][ T5130] Bluetooth: hci1: link tx timeout [ 417.159498][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 417.168001][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.178020][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.185955][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 201 19:55:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0016000400"/17], 0x11) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_rsp={{0x18, 0x6, 0xe}, {0x8001, 0x3ff, 0x8000, 0x75, [0x1f, 0x1, 0xff]}}}}, 0x1b) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x30}, @l2cap_cid_signaling={{0x2c}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x5, 0x6, 0x8000, 0x7aa8}}, @l2cap_conf_rsp={{0x5, 0xec, 0x1c}, {0x1f, 0x8, 0x3ff, [@l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x7, 0x2215, 0x7f, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}]}}, 0x35) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 19:55:15 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) 19:55:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010066715f70696500001c00000000050008000600"/52], 0x4c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x13, 0x100, 0x70bd29, 0x25dfdbfc, {0x25, 0x9, 0xe1, 0x3d, {0x4e23, 0x4e22, [0x5e, 0xffffff7f, 0x9, 0x4], [0x1, 0x4, 0x2, 0x8], r3, [0x3ff, 0x81]}, 0x0, 0x8001}, [@INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8e76976110d0f72b4a4b91a70687c0de6dc0c225d3f68523bd34eb21d971c66d143f984b09f68aa2110c576fb96f4d533bc0"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "ad279e8427aa3612c2d84ccd27fbef160a2bc1b343dff42e565f03fec7ad6b9481b55953fe7e693a22ab88120ee000dd017bf7db1ac85a1de5472f4f7d8fa6027a805dbeaea79c0e08d994a25e694672738a190e35a701431af7eca8db8d0486cd87bc600b008105f541902d4de8e86b2b5b2219fe30e060aff18ddf9e0685"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x3ff, 0x220482) ioctl$sock_ifreq(r4, 0x8911, &(0x7f00000003c0)={'wg2\x00', @ifru_settings={0x101, 0xfffffff9, @cisco=&(0x7f0000000300)={0x80000000, 0x1b}}}) 19:55:15 executing program 2: r0 = socket(0xa, 0x8000a, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c41625236e93b82912c7f0712fe5dabdf8697172bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00"}}}, 0x102) (async) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="59545eb58f13af669e2f21a9e503f88e6effa84bf1a73457dfcd2436ebc510d747b2a1b56380a08828608902ad80f3f34e4d09025520aa5e01c2ac42bf9ffb003364e4cece45f32267aebeff14eec9ab9b16f42da553646d05f48bb8ed376fe16098ab1b433213a8ecbd956ac71f7ae3a74ace6b01478e476d31baa3cadabd636148f31beda935ebdcb259c49663f2fbd1e2ce38148fcc5940f6e34b5f62bf77329217c1dcb3a95c3e", 0xa9}, 0x1, 0x0, 0x0, 0x90}, 0x8000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@gettaction={0x80, 0x32, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x6, 0x2}, {0x8a83}}}}, 0xf) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x706, 0x800}}}}, 0x11) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) 19:55:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:15 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x36, 0x39, 0x62, 0x36, 0x30, 0xb2307983275d6c3, 0x39, 0x30, 0x0, 0x32, 0x34, 0x36, 0x35, 0x65, 0x6, 0x31]}, &(0x7f0000000100)={0x0, "25aa11bc9e7df754edd2f2359cb1551e7e6692d91fe17afa9b2fd37ad2ff4aa417390a15ec06b30a6f5c07ab96e5128c7f93506dc72e3cdf58d01a8cc583dde5", 0x24}, 0x48, 0xfffffffffffffffa) keyctl$update(0x2, r0, &(0x7f0000000180)="2d058243b885200fe16fab03e39866defc79d21bc73e23e0c0d7ca7921c234506c7d5845d9835b484572d1d8d4051037b083b4461ca4", 0x36) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c900da0094d970417c0132a1598c14ba6951"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1, 0xc9, {0x9, 0x1, 0x20, 0x3ff, 0x8}}}}, 0x17) [ 417.235558][ T5130] Bluetooth: Wrong link type (-57) [ 417.240969][ T5130] Bluetooth: hci1: link tx timeout 19:55:15 executing program 5: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9dcb3f662be1811fb45a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00bcfd5053969095f452e7c99ad56736eea2fc9fcb117c1fbdc5536328dd68dee1a91a30d9cf028a91ea43934a7678be81f2e36ae3898f9c0d98f62c56ce2d2e64b666050b588823451ddec7dfdf92377f0c93bffab4898977e8599b88f11aa6b291d7c12d2f7ce3ac0ac23a715384fa3c2aaf8e5f14b12f3a40094b7c1b"], 0x102) 19:55:16 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x36, 0x39, 0x62, 0x36, 0x30, 0xb2307983275d6c3, 0x39, 0x30, 0x0, 0x32, 0x34, 0x36, 0x35, 0x65, 0x6, 0x31]}, &(0x7f0000000100)={0x0, "25aa11bc9e7df754edd2f2359cb1551e7e6692d91fe17afa9b2fd37ad2ff4aa417390a15ec06b30a6f5c07ab96e5128c7f93506dc72e3cdf58d01a8cc583dde5", 0x24}, 0x48, 0xfffffffffffffffa) keyctl$update(0x2, r0, &(0x7f0000000180)="2d058243b885200fe16fab03e39866defc79d21bc73e23e0c0d7ca7921c234506c7d5845d9835b484572d1d8d4051037b083b4461ca4", 0x36) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c900da0094d970417c0132a1598c14ba6951"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1, 0xc9, {0x9, 0x1, 0x20, 0x3ff, 0x8}}}}, 0x17) [ 417.342890][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 417.350749][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:16 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:16 executing program 5: r0 = socket(0x1e, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$FIOCLEX(r0, 0x5451) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x7, 0x2}}}, 0xc) sync_file_range(r0, 0xf7a, 0x2, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9b04500410001000ce005009e250300e105051c0000000700ff0702020100061001012d0095c25f05846ede8affffff7f06030400020000080e0503000100080c2005008000400014"], 0x4a) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1, 0xc9, 0x81}}}, 0x7) 19:55:16 executing program 4: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1411, 0x2, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa040100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) 19:55:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04021d02aaaaaacaaa000000008e70c30000ffffffffdd4a2f7b1000682ef7ffff0000003088870000"], 0x20) 19:55:16 executing program 2: r0 = socket(0xa, 0x8000a, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c41625236e93b82912c7f0712fe5dabdf8697172bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00"}}}, 0x102) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="59545eb58f13af669e2f21a9e503f88e6effa84bf1a73457dfcd2436ebc510d747b2a1b56380a08828608902ad80f3f34e4d09025520aa5e01c2ac42bf9ffb003364e4cece45f32267aebeff14eec9ab9b16f42da553646d05f48bb8ed376fe16098ab1b433213a8ecbd956ac71f7ae3a74ace6b01478e476d31baa3cadabd636148f31beda935ebdcb259c49663f2fbd1e2ce38148fcc5940f6e34b5f62bf77329217c1dcb3a95c3e", 0xa9}, 0x1, 0x0, 0x0, 0x90}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@gettaction={0x80, 0x32, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x6, 0x2}, {0x8a83}}}}, 0xf) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x706, 0x800}}}}, 0x11) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) socket(0xa, 0x8000a, 0x2) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c41625236e93b82912c7f0712fe5dabdf8697172bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca00"}}}, 0x102) (async) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="59545eb58f13af669e2f21a9e503f88e6effa84bf1a73457dfcd2436ebc510d747b2a1b56380a08828608902ad80f3f34e4d09025520aa5e01c2ac42bf9ffb003364e4cece45f32267aebeff14eec9ab9b16f42da553646d05f48bb8ed376fe16098ab1b433213a8ecbd956ac71f7ae3a74ace6b01478e476d31baa3cadabd636148f31beda935ebdcb259c49663f2fbd1e2ce38148fcc5940f6e34b5f62bf77329217c1dcb3a95c3e", 0xa9}, 0x1, 0x0, 0x0, 0x90}, 0x8000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@gettaction={0x80, 0x32, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x6, 0x2}, {0x8a83}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x706, 0x800}}}}, 0x11) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) (async) 19:55:16 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x36, 0x39, 0x62, 0x36, 0x30, 0xb2307983275d6c3, 0x39, 0x30, 0x0, 0x32, 0x34, 0x36, 0x35, 0x65, 0x6, 0x31]}, &(0x7f0000000100)={0x0, "25aa11bc9e7df754edd2f2359cb1551e7e6692d91fe17afa9b2fd37ad2ff4aa417390a15ec06b30a6f5c07ab96e5128c7f93506dc72e3cdf58d01a8cc583dde5", 0x24}, 0x48, 0xfffffffffffffffa) keyctl$update(0x2, r0, &(0x7f0000000180)="2d058243b885200fe16fab03e39866defc79d21bc73e23e0c0d7ca7921c234506c7d5845d9835b484572d1d8d4051037b083b4461ca4", 0x36) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c900da0094d970417c0132a1598c14ba6951"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1, 0xc9, {0x9, 0x1, 0x20, 0x3ff, 0x8}}}}, 0x17) [ 417.461612][ T5130] Bluetooth: Unexpected start frame (len 218) [ 417.495713][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:16 executing program 4: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1411, 0x2, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa040100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) [ 417.509155][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:16 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x1) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04021d02aaaaaacaaa000000008e70c30000ffffffffdd4a2f7b1000682ef7ffff0000003088870000"], 0x20) 19:55:16 executing program 5: r0 = socket(0x1e, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 32) ioctl$FIOCLEX(r0, 0x5451) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x7, 0x2}}}, 0xc) (async) sync_file_range(r0, 0xf7a, 0x2, 0x1) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9b04500410001000ce005009e250300e105051c0000000700ff0702020100061001012d0095c25f05846ede8affffff7f06030400020000080e0503000100080c2005008000400014"], 0x4a) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1, 0xc9, 0x81}}}, 0x7) (rerun: 64) 19:55:16 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) [ 417.580712][ T5130] Bluetooth: Unexpected start frame (len 218) [ 417.583031][ T5118] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:16 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:16 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b00616ed65b49b06b1fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x32}, @l2cap_cid_signaling={{0x2e}, [@l2cap_move_chan_rsp={{0xf, 0x83, 0x4}, {0x2154, 0x3}}, @l2cap_conf_req={{0x4, 0xfc, 0x22}, {0x200, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x7fff}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x2, 0x6, 0x80, 0x3f}}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}]}}]}}, 0x37) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c94010000c000500b2904663990899ee40000000"], 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x7}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x9, 0x1ff}}}}, 0x11) [ 417.631342][ T5118] Bluetooth: Unexpected start frame (len 218) [ 417.637866][ T5118] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 417.645614][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:16 executing program 4: sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1411, 0x2, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa040100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (rerun: 32) 19:55:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x1) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04021d02aaaaaacaaa000000008e70c30000ffffffffdd4a2f7b1000682ef7ffff0000003088870000"], 0x20) 19:55:16 executing program 5: r0 = socket(0x1e, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 64) ioctl$FIOCLEX(r0, 0x5451) (rerun: 64) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x7, 0x2}}}, 0xc) sync_file_range(r0, 0xf7a, 0x2, 0x1) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9b04500410001000ce005009e250300e105051c0000000700ff0702020100061001012d0095c25f05846ede8affffff7f06030400020000080e0503000100080c2005008000400014"], 0x4a) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1, 0xc9, 0x81}}}, 0x7) 19:55:16 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) 19:55:16 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x32}, @l2cap_cid_signaling={{0x2e}, [@l2cap_move_chan_rsp={{0xf, 0x83, 0x4}, {0x2154, 0x3}}, @l2cap_conf_req={{0x4, 0xfc, 0x22}, {0x200, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x7fff}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x2, 0x6, 0x80, 0x3f}}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}]}}]}}, 0x37) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c94010000c000500b2904663990899ee40000000"], 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x7}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x9, 0x1ff}}}}, 0x11) 19:55:16 executing program 3: r0 = socket(0x0, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 417.797179][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.805180][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.816400][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.828938][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.836694][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.843103][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 417.844893][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.860200][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.868149][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.875879][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.885834][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:16 executing program 1: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x8, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x7}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x0, 0xc6f, 0xf800, 0x4}}, @l2cap_conf_rsp={{0x5, 0x80, 0x52}, {0x242, 0xfffc, 0x8e1e, [@l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_efs={0x6, 0x10, {0xdd, 0x3, 0x0, 0x4, 0xfffffffc, 0x7fffffff}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x0, 0x8, 0x100, 0x2bf18681}}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x7f, 0xfffffffd, 0xe4, 0x8}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x8, 0x7f, 0xeb53, 0x6, 0x1}}]}}, @l2cap_disconn_req={{0x6, 0x1f, 0x4}, {0x22d, 0x4}}]}}, 0x81) 19:55:16 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) 19:55:16 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x1080, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x3f, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab5cad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b812c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587b308f2adb2ab039d575ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f06ec2cecc8661ca00"}}}, 0x102) 19:55:16 executing program 2: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x32}, @l2cap_cid_signaling={{0x2e}, [@l2cap_move_chan_rsp={{0xf, 0x83, 0x4}, {0x2154, 0x3}}, @l2cap_conf_req={{0x4, 0xfc, 0x22}, {0x200, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x7fff}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x2, 0x6, 0x80, 0x3f}}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}]}}]}}, 0x37) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c94010000c000500b2904663990899ee40000000"], 0x15) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x7}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x9, 0x1ff}}}}, 0x11) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x32}, @l2cap_cid_signaling={{0x2e}, [@l2cap_move_chan_rsp={{0xf, 0x83, 0x4}, {0x2154, 0x3}}, @l2cap_conf_req={{0x4, 0xfc, 0x22}, {0x200, 0x2, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x7fff}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x2, 0x6, 0x80, 0x3f}}, @l2cap_conf_mtu={0x1, 0x2, 0x8001}]}}]}}, 0x37) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c94010000c000500b2904663990899ee40000000"], 0x15) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0x7}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x9, 0x1ff}}}}, 0x11) (async) [ 417.893842][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.901809][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.917761][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.925656][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.933794][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:16 executing program 4: r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='$\x00', 0xfffffffffffffff8) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000100)='/\x00') [ 417.941519][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.949389][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.957208][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.964923][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.973127][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.981208][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.990240][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 417.997995][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.017414][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.025931][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.029165][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:16 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x1080, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x3f, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab5cad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b812c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587b308f2adb2ab039d575ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f06ec2cecc8661ca00"}}}, 0x102) 19:55:16 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02bdb7da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8802d0001000a1102000600100704000400000004040fe5020009000409000505fcff48ceff7f0d03080006005be881000002d1cb5c2e955f4295a540f44634d164ff380100000066b449e32a91d216db3556135b5a18f681203b6cc0fe1e5aef358a6fa2173b333d63611a0261dd4370cb4c6a3384f2462df9d42eb53c26e47bb8bad91b444199ef1b8b6dac40b7b54358d31d"], 0x36) [ 418.033643][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.049343][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.057019][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.064905][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.073454][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.081194][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.089099][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:16 executing program 1: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x8, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x7}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x0, 0xc6f, 0xf800, 0x4}}, @l2cap_conf_rsp={{0x5, 0x80, 0x52}, {0x242, 0xfffc, 0x8e1e, [@l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_efs={0x6, 0x10, {0xdd, 0x3, 0x0, 0x4, 0xfffffffc, 0x7fffffff}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x0, 0x8, 0x100, 0x2bf18681}}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x7f, 0xfffffffd, 0xe4, 0x8}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x8, 0x7f, 0xeb53, 0x6, 0x1}}]}}, @l2cap_disconn_req={{0x6, 0x1f, 0x4}, {0x22d, 0x4}}]}}, 0x81) [ 418.096955][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.105730][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.137944][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 1981 19:55:16 executing program 4: r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='$\x00', 0xfffffffffffffff8) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) (async) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000100)='/\x00') 19:55:16 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "15f335029584c36b175077aa44ae645e98ce78a3d916950ffcd4232ce38e2b1ee0e04923ba2a458a2732fd5a6c8fa9f7ea0008b6d91322"}, 0x3b) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd4}, "5460083a51a81148a8fb3e5c051687061413d3a4883111a9e0eb88dd76f3796c694116037e10ecf675898f5a77f9b551a6638cde2089ba0793840a90fa81c13a77a0d53a3deef0a56f49a7c44a9fb08c7338b8eeb1fe12cc70549572dfe4faed250d049f871d5ef3e465e6f298124f4082d2c1e64ce384bac50db230382bf8b63d19cfa6e4d5f2dd951d55c898a3208785947f8ee891a3757a2ff55eece00ec76d5a1ee3077454b17eb4f59ee72fb18c5d86c1bbac72507e6a77d2e043e63c62043c4ac94879df287eeaf340c70b1d914f4db578"}, 0xd8) 19:55:16 executing program 3: r0 = socket(0x0, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:16 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02bdb7da00d6"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8802d0001000a1102000600100704000400000004040fe5020009000409000505fcff48ceff7f0d03080006005be881000002d1cb5c2e955f4295a540f44634d164ff380100000066b449e32a91d216db3556135b5a18f681203b6cc0fe1e5aef358a6fa2173b333d63611a0261dd4370cb4c6a3384f2462df9d42eb53c26e47bb8bad91b444199ef1b8b6dac40b7b54358d31d"], 0x36) [ 418.146717][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:16 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x1080, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x3f, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab5cad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b812c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587b308f2adb2ab039d575ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f06ec2cecc8661ca00"}}}, 0x102) 19:55:16 executing program 4: r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='$\x00', 0xfffffffffffffff8) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x0) (async) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000100)='/\x00') 19:55:16 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f79253215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d0000366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bb133ab826274dd6c249c71c64e4a2ef4ac6e6967feb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "15f335029584c36b175077aa44ae645e98ce78a3d916950ffcd4232ce38e2b1ee0e04923ba2a458a2732fd5a6c8fa9f7ea0008b6d91322"}, 0x3b) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd4}, "5460083a51a81148a8fb3e5c051687061413d3a4883111a9e0eb88dd76f3796c694116037e10ecf675898f5a77f9b551a6638cde2089ba0793840a90fa81c13a77a0d53a3deef0a56f49a7c44a9fb08c7338b8eeb1fe12cc70549572dfe4faed250d049f871d5ef3e465e6f298124f4082d2c1e64ce384bac50db230382bf8b63d19cfa6e4d5f2dd951d55c898a3208785947f8ee891a3757a2ff55eece00ec76d5a1ee3077454b17eb4f59ee72fb18c5d86c1bbac72507e6a77d2e043e63c62043c4ac94879df287eeaf340c70b1d914f4db578"}, 0xd8) 19:55:16 executing program 1: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x8, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x7}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x0, 0xc6f, 0xf800, 0x4}}, @l2cap_conf_rsp={{0x5, 0x80, 0x52}, {0x242, 0xfffc, 0x8e1e, [@l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_efs={0x6, 0x10, {0xdd, 0x3, 0x0, 0x4, 0xfffffffc, 0x7fffffff}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x0, 0x8, 0x100, 0x2bf18681}}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x7f, 0xfffffffd, 0xe4, 0x8}}, @l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x8, 0x7f, 0xeb53, 0x6, 0x1}}]}}, @l2cap_disconn_req={{0x6, 0x1f, 0x4}, {0x22d, 0x4}}]}}, 0x81) [ 418.196621][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.225931][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:16 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x49}, @l2cap_cid_signaling={{0x45}, [@l2cap_disconn_rsp={{0x7, 0xd3, 0x4}, {0x6, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x0, 0xfffc, 0xf03, 0x488}}, @l2cap_conf_rsp={{0x5, 0x1f, 0x18}, {0x9, 0x101, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x3f, 0x1, 0x8, 0x7fff, 0x8000, 0x575}}]}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0xe000, 0x6, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0x1f, 0x8}, {0x6, 0x6, 0x148, 0x3}}]}}, 0x4e) [ 418.286492][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 418.288586][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.302468][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.304585][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:16 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x49}, @l2cap_cid_signaling={{0x45}, [@l2cap_disconn_rsp={{0x7, 0xd3, 0x4}, {0x6, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x0, 0xfffc, 0xf03, 0x488}}, @l2cap_conf_rsp={{0x5, 0x1f, 0x18}, {0x9, 0x101, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x3f, 0x1, 0x8, 0x7fff, 0x8000, 0x575}}]}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0xe000, 0x6, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0x1f, 0x8}, {0x6, 0x6, 0x148, 0x3}}]}}, 0x4e) 19:55:17 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02bdb7da00d6"], 0xdf) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8802d0001000a1102000600100704000400000004040fe5020009000409000505fcff48ceff7f0d03080006005be881000002d1cb5c2e955f4295a540f44634d164ff380100000066b449e32a91d216db3556135b5a18f681203b6cc0fe1e5aef358a6fa2173b333d63611a0261dd4370cb4c6a3384f2462df9d42eb53c26e47bb8bad91b444199ef1b8b6dac40b7b54358d31d"], 0x36) (rerun: 32) 19:55:17 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f79253215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d0000366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bb133ab826274dd6c249c71c64e4a2ef4ac6e6967feb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x37}, "15f335029584c36b175077aa44ae645e98ce78a3d916950ffcd4232ce38e2b1ee0e04923ba2a458a2732fd5a6c8fa9f7ea0008b6d91322"}, 0x3b) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd4}, "5460083a51a81148a8fb3e5c051687061413d3a4883111a9e0eb88dd76f3796c694116037e10ecf675898f5a77f9b551a6638cde2089ba0793840a90fa81c13a77a0d53a3deef0a56f49a7c44a9fb08c7338b8eeb1fe12cc70549572dfe4faed250d049f871d5ef3e465e6f298124f4082d2c1e64ce384bac50db230382bf8b63d19cfa6e4d5f2dd951d55c898a3208785947f8ee891a3757a2ff55eece00ec76d5a1ee3077454b17eb4f59ee72fb18c5d86c1bbac72507e6a77d2e043e63c62043c4ac94879df287eeaf340c70b1d914f4db578"}, 0xd8) 19:55:17 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) socket$packet(0x11, 0x5, 0x300) [ 418.331999][ T5130] Bluetooth: hci2: command 0x0409 tx timeout [ 418.343139][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:17 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x20) 19:55:17 executing program 3: r0 = socket(0x0, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 418.396556][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.407623][ T5130] Bluetooth: hci4: command 0x0409 tx timeout [ 418.456761][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.468392][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.476165][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.483990][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.491807][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 19:55:17 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x49}, @l2cap_cid_signaling={{0x45}, [@l2cap_disconn_rsp={{0x7, 0xd3, 0x4}, {0x6, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x0, 0xfffc, 0xf03, 0x488}}, @l2cap_conf_rsp={{0x5, 0x1f, 0x18}, {0x9, 0x101, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x3f, 0x1, 0x8, 0x7fff, 0x8000, 0x575}}]}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0xe000, 0x6, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0x1f, 0x8}, {0x6, 0x6, 0x148, 0x3}}]}}, 0x4e) 19:55:17 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) socket$packet(0x11, 0x5, 0x300) (async) socket$packet(0x11, 0x5, 0x300) 19:55:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000500)=@framed={{}, [@jmp={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 418.499650][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.507490][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.515244][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.523737][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.532189][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.540014][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.547970][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.555743][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.567497][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.575256][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.583109][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.591066][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.598889][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 19:55:17 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}}}, 0xb) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfe}, "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"}, 0x102) 19:55:17 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x20) [ 418.599914][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.606638][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.622061][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.630480][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.638312][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.646074][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 19:55:17 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000c00080003000000040000000000"], 0x11) 19:55:17 executing program 5: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) (async) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) socket$packet(0x11, 0x5, 0x300) (async) socket$packet(0x11, 0x5, 0x300) [ 418.653934][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.661737][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.669672][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.677477][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.685242][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.693053][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 19:55:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000500)=@framed={{}, [@jmp={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 418.700910][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.708718][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.716466][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.724278][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 1981 [ 418.732807][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.740581][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.748319][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.755985][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.763723][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.771447][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.779167][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.786839][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.794580][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:17 executing program 3: r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:17 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x20) (async) [ 418.802300][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.810293][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.811609][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 418.818010][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.818053][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.818098][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.849558][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:17 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}}}, 0xb) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfe}, "8e81caadde5dfc887d986d84ec88261d79eee4b87d63721df68f34ba6f81292fdc58cc68a2f488785a9ddf176c575f59bba0fe772e79c6240ae9c630463da61f8e43ec619fdc4582c14bb252612ccd581acbbff87728685516819f322b835136da2dbcd23b91eed77466fa41205c72c2da53253807633824bd2dc2f030d637a8e21e54df80ca5b4ddef038fb469390080e5a9018e377fa8dd8d6e343dd72709153ca81155f606c93825a595ac7e46092b97d33ae18f8abdea1de31a05b80bb21ca1fe7fc904a4c7fa631f46e9ce157c14fdb0e8bb4cea5a583243214e1d36dc9a163144d45e8f95687598589abb8ebc71234a7cbf2a5f6f025bb26f54472"}, 0x102) [ 418.857230][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.864960][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.872686][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.880442][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.888294][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.895989][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:17 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000c00080003000000040000000000"], 0x11) [ 418.907573][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.915245][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.922987][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.930714][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.939055][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.946739][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:17 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x8}}}, 0xa) 19:55:17 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0x5, 0x5, 0x5, "5ec5c5", 0x5, 0x81}, {@none, 0xad, 0xc0, 0x75, "1c72ca", 0x8, 0x5}, {@any, 0x1f, 0x4, 0x9, "aec11a", 0x38, 0x5}, {@none, 0x1f, 0x4, 0xff, "0891f2", 0x9, 0x3}, {@any, 0x21, 0x40, 0x4, "87cbb2", 0x800, 0x6}]}}}, 0x4f) 19:55:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000500)=@framed={{}, [@jmp={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 418.954468][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.962187][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.969985][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.977705][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.985382][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 418.993109][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:17 executing program 3: r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:17 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0x5, 0x5, 0x5, "5ec5c5", 0x5, 0x81}, {@none, 0xad, 0xc0, 0x75, "1c72ca", 0x8, 0x5}, {@any, 0x1f, 0x4, 0x9, "aec11a", 0x38, 0x5}, {@none, 0x1f, 0x4, 0xff, "0891f2", 0x9, 0x3}, {@any, 0x21, 0x40, 0x4, "87cbb2", 0x800, 0x6}]}}}, 0x4f) 19:55:17 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}}}, 0xb) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfe}, "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"}, 0x102) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfe}, "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"}, 0x102) 19:55:17 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x8}}}, 0xa) 19:55:17 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000c00080003000000040000000000"], 0x11) 19:55:17 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0x5, 0x5, 0x5, "5ec5c5", 0x5, 0x81}, {@none, 0xad, 0xc0, 0x75, "1c72ca", 0x8, 0x5}, {@any, 0x1f, 0x4, 0x9, "aec11a", 0x38, 0x5}, {@none, 0x1f, 0x4, 0xff, "0891f2", 0x9, 0x3}, {@any, 0x21, 0x40, 0x4, "87cbb2", 0x800, 0x6}]}}}, 0x4f) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0x5, 0x5, 0x5, "5ec5c5", 0x5, 0x81}, {@none, 0xad, 0xc0, 0x75, "1c72ca", 0x8, 0x5}, {@any, 0x1f, 0x4, 0x9, "aec11a", 0x38, 0x5}, {@none, 0x1f, 0x4, 0xff, "0891f2", 0x9, 0x3}, {@any, 0x21, 0x40, 0x4, "87cbb2", 0x800, 0x6}]}}}, 0x4f) (async) [ 419.057028][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:17 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x8}}}, 0xa) 19:55:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x4e) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee00, 0xee01, 0x80}, 0x0, 0x7}) setresuid(0xee01, 0xee00, 0x0) getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200), 0xc, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x44) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x1040000, 0x0) getresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) getpid() sched_setscheduler(0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0x4}}, 0x9) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/237, 0xed}, {&(0x7f00000006c0)=""/222, 0xde}], 0x9, &(0x7f00000009c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000880)=""/255, 0xff}, &(0x7f0000000980)}}], 0x30, 0x4000014}, 0x8084) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value={0x0}, &(0x7f0000000a80)=0x8) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000ac0)={r2, @in={{0x2, 0x4e24, @local}}, 0x6, 0x3}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000b80)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20, 0x4, 0x5, 0x7, 0xe4, 0xe1, 0xff}, &(0x7f0000000100)=0x9c) 19:55:17 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8=0x0], 0xdf) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) 19:55:17 executing program 3: r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:17 executing program 1: setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0xffff, 0x8001, 0x7, 0x1ff, 0x800, 0x5, 0x800}, &(0x7f00000000c0)=0x20) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e5fe5e6e41c4e7470c30000ffffffffffff000088870000"], 0x20) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 19:55:17 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8=0x0], 0xdf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "7171eef261f5235d76cb01704d6584e747061caa04b7470a183d0a3b66b8f0d247b0557e9a8d4a43925bbfc958502fbe5f650591c5e4b7807c48f517e00e588331d76225a38665a57bab3e91a7311ebca747e50f7a32735356a1023a124aab61fb8e926e82311799a96484da6143783b4084e2d378d42de4ba5abb44fab3f6ff9563d0c2c7857716add4aa36268236efe1114323506ed109f838447b4f81824b5b7089bb63cd1b83373246b899111f9ecb1fdaf84cd9c02a90489c82fcff4fed91f51e325e7e52644b93e83426df50eda67196b8ce49e75b70c496a28c345cac1b39e7080c124288ba9f17eb87e2ba1cb82abb1d0d1eb20b70d329e30dda10d9f4df37f54c4ed01e79e8dc1f8885997b860ade72dee91b41d665b0b9eeb1d7a1ded63ad71985e077e7700a73dd5a41692de48f6deaf2eca3fe335a37f7d11754c9492b35d7038bd60ec03557b6bc54da457d89b486cf53bec0476a3608d09a73d328e6183afe84a92e835ed476a33883d56189d38edea4d973fc89bce1c57c9cf86e46d3034e0bd5c7d9ae9ac4c40e44de869ccb095a1680240765c21a9d7cc4c8b7f48601c2de625dc2b95adab0ed15cdb6c9e382482eae3db465f4d192bdfe40a9507a54cc95e2f5af2f9912474bce94c2e98ccf3fd614b327a173e9f585f670cba3aa9aa2b6b0fdd4d9e4e7752eb33375be71b4c5fd099aef47e3dd2dd8aa417350b0627ff4218bae8e8f43b71332da99b7d5c3a744370c230eaec822944744627411711ece732b383b2ffea0b0be31ef5830c56fa2f917d8b019166c160480a818b20f96ce152cf70855af48986cc56056d216f8eef2e980695ef3a9c5c64b336feaa9aa2cca89c2b7b89b8cb8e179efd2eacf82089de739bfc48c66767f332be02461d921363533c6e10d1084db02fe000cb8bbce871ebcf08fa91d48401b40ab3f526e00912c62990df4385a230baec76fb9741635045ffdcba48611e9a45f244b159ae1d812c18ec7384acdfe83237dc84f81b14f3cb0f3294c0846e1326485b111475683e85d5dc8f51fe56607b3eff4196babaee8414f296669c08a23bd31223ed049343be1a7e0f5fdcca4c91c6c9d8a23aa846928308b8e92a4a428f8cb1654150c90caf557348d180f3bb8da1b425a587a3f38c2dac8645b4cccf818f8654207f75c992fc438fcd089ce2e3cc625d1c2a13fe856db152fbf228d4cfd56a220e71768dbc69ff1e38d244cd02aa64ed4c5eb0330397ca66a732e96b8b3c7ec70aff9f00ef1ac9d1fcdd0a364c298cb164e7c1f698f6bbeb224654d252d33d8104391dd475414a74cfdf78ebda5f4320ea62cc1d99699a2dd8eab2d4bf1c6016e3e1d45b96233736fdc09e74a2d33b32ab97355d59b7e708cb4e6c66dcaf781175a577828eb4ab8ee5a4d2568ce308e0b27c87b8b4e20776672e3ae1efc3af0b7f8ce0871a29b29d9537f8d40eda0b36a6d7e86e9a1d67973b2fc0d4d1a97c0691f069f3399c243d3da61386712859a562a29c0b76c69402a120f80065c85b5e51109781311a7c13d930e8041b789ac2a4011924be012a265d57aca427eed28a4c5e32ded77e51ecc43f2fc2604d3194a641f248be974671478d469af443b186da338173b6b697a461a325f8511e48c5c12a811c8be0ac20935d1514b7c75a861e563a91772e41a064b912aae7bff4ad0ff367b5eb1b2075012c443c22d909edc3b70b683904e352f9570251d1edc958476db047e7827bfd9e55c3d122b52958c4befa9899b7d8c811090e8c46dd6af3ce6e27635187bf3d5369b6965130d83fc0cb9f4dd245b15b0c195ee5ce56cf464ce2dd2676e6e40b0eb3d24ed6438b54d4c45904877680ec341b17f30cbe2e6411b6f434f27c30e4b1abc939decc397e1adae121e15355f600f791733f5519e2090c0f1ba623a0d2bfe1d313d72d9c87c74754d74f3c1089f327944e6ae1b774c4e4a4d561e0374b071e81af5f21a272f56f5ea19e31d028024b48d44ca879570e7e371d91533ced593e62a787d762794536e42418cf707929203008d11a2466a02254c00f38714da29d9dd28041d1f31e8671142fda39694755f956d687b6463c73ea0f0ff36b8a85d2c28d9e50a4c457d66e9f52a15478daa88c1ffabf669e3096b5938f45930b1e65eb516f845e6f3cec329ca49bfc7f1cdc5580e5a461b2929ce928a76c739a35cefe1e023e7da328213e6359be2dd1cb9d287522118636ec1a21a2cc6e8f5c3aa071e49284cfa409993972f9adfb269993f2461ce7bcfbfa92839603e8d9cd143be98136ee50897ee993193568c1461ab8b5d1ede264435fbfa5eee4a6c34bb9b3fc75e7e6e859753ee7ee71861d64f11a94f2c7a8c71525916ad568324481590a4bae9c97f6da67960f68381d77161e31327e1012aa167a5e6ba22542e5ddc0d5d467e7a3a460b4d3012c3e6115457cc25ffe1fb1e6784510cf3fab765b80e69de0edaa880e8089cde790c59797dd3dbbdb139bd71675eee8f2fa800ed1f7c5ffbd43e7453584f47b382cb1d0f607c42100d31164315e52a4921da7c5110dab51187859ef8225799df5123d9abf6ce14810dffbcb96b510d87915f5d5bbbc279f7e5b3a4b6a4ae5e6a2bb5aa5369065393cc8b20d788e0230fc9b0aa8eb5e80502a5386e5177dc789d055ebc533e5e66321b7e80624ad6c4c101a002963dff9ecf79c2579474907b8b42d6565830756c1b70924164b0a007963da5aa27adf00ba4473cef126e1e006b35c38ce284588fa7d8b03a689ffd666b1a59be8e026f7e15519abbcaa715ddf35aaee45cce8f555244f49af28795569b8631c65ac2c53fe61bf1fc234dbe793b26d718b9e6dcc3f622d8623ef1d0eb0db88e40274f10b906352fb0e406bacd30d0bc9f077fb2805f88e6e0bbbd5b7493b3765331e989551f39124e3674fe4d3c8c1f7e12e685394b7ef000035bea953acf515a925454fa3c5af20a09fee9b8f67dbc75a4e8654a3af690a90e99ae19b7a3200fda044f6409aac4d107cb56a34cda1270727f82ae5d10ff7e8a7aa1aa0b287c25f5f79a4d47123e655a95cdeaabf79c82dfb3f7d226219adabb03353395b809be4c1cda7d8a6598df3ba549349fc5d8855c9147302f0515b8bfd117473acc735129b3c71627bb479643ff8e9698ff70e6d2f0aefbdc3430c1ffffa20f3be1a51a18176ace1db1c262208ada83d4829e939daad46f8f13967e6e75a7d52692a9fb60cf76817de0ec57cfe46b30e2903a66b1893324e1e8375a524caca1885324ebfce48d0fc6de022026c70b8b86579987a789b5af55013430b6bbc50a4137438536214f6447252771e90bf7c90e4729cad7653011ac7618647167ec78e79e7ea9942048611f786be3025de0629c83c12f6f574660713ac008e7edf6a0c5275664814c359335e3aef7a0e11480fb2f01281bc40b1b5a47cff7d1aba2547b0b54f73ea12ceeb7d9c6507f6961a05e4b635c2752706d49168670671cc859fd4f70663a459649d5687467309b4ab54c9989c78f871afa31a53ba9e01ac4509839010723d28e7e749f8cc435907a2e521138fe4b8e83863eb0f22613c09170c1792dc5408eb578b6cc02a8ec8c76120aea1e8b80b95e1d5a2d1b55f7cc4bd64b3b4fc869210848757ca3010167299ffc363781b98c3adf53ba78f4a8bc1da611b81ef44a6cc89cca46fd577e74340130184ffd6c12e445871f876562b9f605829d87501ae81e3647dc26fd6a2c351d49a43e852946a1a7e9055927a05dd1741512d6f318f8ac66998489f77de53b322ce5a5694a0785801226e4b1538b764f504c89937c6fbf48764d52d8f6bb6499d23880f9e0a4ec67e44883d4ea2e8319447f5a3e6077b679170ee88d3bbec0153410c0e2e5bdf4f35ad5e6fee2d14555dec9be7ebf29d5620c700b953eae046f4734bce0ba1aa4b59f0f7a47c86bc310e75bd0841a250b0eebd78f2ecc5df5303699ff8a5687bfe57ecc84c27904d3b1df7e3b483f48cf85d8a1c35e548563e4d6bc2121b9171ce47da53da300a4776580a1514f98245b5790161d997e823ff129af4bbb9e1edc57af60c56bcd25495b93da14b0cce29462267477564aceead895bc0438d94d0cff1e7e36784917cdbd706e8f3a6ab7566785ec2580eeace858cbaf9a7d7ccea70168cdb43fb243ef7c69706bdb8b9a6bcda63997cdbd4a548596791761f8ad816bbe8eb1c340e3344c3850e2141a28050be0502c8531cb90209c05aeca95a7d728b4d816cf7b325f853c8b75412f1b5129d709cc87dff6514084dff1da42ca4530aadc68dd41e1027f7a9c2bfb82e7085c8e6660fab1290b225c4ab7f8d68a9355257147f64b94b6f380a6ff39d0ecd1944df234b45dc3ba204a6845cacf5942012b144ba47818d5fb1dd7c345f3479591840a6a72347bd3c977b99f9cde1caa9a07833d305a10f3006b57758c4a54979323b208b1f843385445b26595692a00ef8f41c96f2396a43514e4856d5ae196817cc27f38e073b7caf3a7ef48c7a496aa22fee1ce3c0b52f910eaa3e4ea446a7148662533b4e7442095b96dd7ee6fe0f3ed2d9ffa87b44fd7231dca324917e3c848e58b1cf075007df076d60c5bbbcfef113977cde3023fa63273f8c7c2410e70ad3ed093b4b6648c6be2f4bf49b59c6350bbba20125545a28d0e736e4a0213bb7dfcb45e98a67bd4b8fb950c9f6f4eeda4123a4a28344350a2b788176f8d04ab630dff83b50ba9eb034189e5f6c4e02b6934f11685a21998ea09e705f4a4bc4f7137aa8a527c881d30dab87d5f98fc35a0fe5132ddf88cbb25473db9c1e92b957196b2098d4f402a9a6ae2cc140939155fa77482b6ccf418d281faa4dd39b0d990539f1df4877a7af136063e8576c61427b96680dd58d8386b44f7876d22fc27c0409760517cfd7ca95ca54203c69c1ad20dd2f259fe43d7fba96a39ba83d206676484e9c8718de5932756a37f551702467e5ed433be3270eb7fb140c3b12355db37b96579cb5a0b55cdf074966943763d627d82d6a433cdfcd6be805ab482429de789786b67dbdc1ba4706c1bcc6dd1492ebff442ccf2b3249b0faf34a57b2e3ed1986c15b854e05551811dbf46b6b9847adc7bb51490e6767882b90048eeb83436bbd00dd7e29e78dbe32ad039d4662bda14ec6b55fc03b95cd53a6567f48b9b01f8025ce91be805dc401344553e5107b88dfd9d4442c1d199a4b2b9e69e8708945cd14571ed3f81184bc9fe203adbeddcf81836ca829852b57bfa861a074b1e922c9afcb12250f10be0d5a417bc03abfd70f170447d68d31ee9f0969a59c0ccdbbfcb3691528989603fd363bb72624730d3a8806ca6a1ca1894b08516d793c5c6b73e48ea882518dac878e45a5b4554bc05f671cbc56bf5f9b2dbb900db8bdc629532691ac5c88769aeacf03aa86f703ce1102cbb3efef9e5d6ba84ff94b6b6d44bb06a424ae22afaa76a6a04948c68b59e7b6e555e87534e18435fcdb663f7540e913219a1fcc86b38cb6e9dab3e74ef57ce26537970acec4a2e2ce3f45262e039ad92e629b5fe4e6875aab355999dd64b2037a03abd9f8ef4afa14800a25e063b4308462f46025a7e9b779a1108bbf9aae1735e09d748681d3f6eba6fac1298664a95bfe8b3720a33da928250a8496fc50a92886c47972ec4a2bfcfad2d9a5e06fe41b16f17d3b5ebfef9d0b0b968415d76972baa240a83051d0d139403b5e74ec82ffae798d7d05719264c2aff4c2b4695972122f46a0f62359ae0821b85ec"}, 0x1004) 19:55:17 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043c07aaaaa2aaaa1109"], 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 419.190946][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:17 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x3}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x8, 0x4}, {0x0, 0x2000}}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x79}, @l2cap_cid_signaling={{0x75}, [@l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}}, @l2cap_conf_req={{0x4, 0x40, 0x6b}, {0x1, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x1, 0x9, 0x0, 0x101, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x8e, 0x1, 0x8, 0x3, 0xdb6, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x0, 0x6, 0x9, 0x20}}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_flushto={0x2, 0x2, 0x7f}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x8, 0x7, 0x2, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x7, 0x5, 0x7f, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xa7, 0xc0, 0x0, 0x7, 0x3f}}]}}]}}, 0x7e) 19:55:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:17 executing program 1: setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) (async) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0xffff, 0x8001, 0x7, 0x1ff, 0x800, 0x5, 0x800}, &(0x7f00000000c0)=0x20) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e5fe5e6e41c4e7470c30000ffffffffffff000088870000"], 0x20) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 19:55:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8=0x0], 0xdf) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "7171eef261f5235d76cb01704d6584e747061caa04b7470a183d0a3b66b8f0d247b0557e9a8d4a43925bbfc958502fbe5f650591c5e4b7807c48f517e00e588331d76225a38665a57bab3e91a7311ebca747e50f7a32735356a1023a124aab61fb8e926e82311799a96484da6143783b4084e2d378d42de4ba5abb44fab3f6ff9563d0c2c7857716add4aa36268236efe1114323506ed109f838447b4f81824b5b7089bb63cd1b83373246b899111f9ecb1fdaf84cd9c02a90489c82fcff4fed91f51e325e7e52644b93e83426df50eda67196b8ce49e75b70c496a28c345cac1b39e7080c124288ba9f17eb87e2ba1cb82abb1d0d1eb20b70d329e30dda10d9f4df37f54c4ed01e79e8dc1f8885997b860ade72dee91b41d665b0b9eeb1d7a1ded63ad71985e077e7700a73dd5a41692de48f6deaf2eca3fe335a37f7d11754c9492b35d7038bd60ec03557b6bc54da457d89b486cf53bec0476a3608d09a73d328e6183afe84a92e835ed476a33883d56189d38edea4d973fc89bce1c57c9cf86e46d3034e0bd5c7d9ae9ac4c40e44de869ccb095a1680240765c21a9d7cc4c8b7f48601c2de625dc2b95adab0ed15cdb6c9e382482eae3db465f4d192bdfe40a9507a54cc95e2f5af2f9912474bce94c2e98ccf3fd614b327a173e9f585f670cba3aa9aa2b6b0fdd4d9e4e7752eb33375be71b4c5fd099aef47e3dd2dd8aa417350b0627ff4218bae8e8f43b71332da99b7d5c3a744370c230eaec822944744627411711ece732b383b2ffea0b0be31ef5830c56fa2f917d8b019166c160480a818b20f96ce152cf70855af48986cc56056d216f8eef2e980695ef3a9c5c64b336feaa9aa2cca89c2b7b89b8cb8e179efd2eacf82089de739bfc48c66767f332be02461d921363533c6e10d1084db02fe000cb8bbce871ebcf08fa91d48401b40ab3f526e00912c62990df4385a230baec76fb9741635045ffdcba48611e9a45f244b159ae1d812c18ec7384acdfe83237dc84f81b14f3cb0f3294c0846e1326485b111475683e85d5dc8f51fe56607b3eff4196babaee8414f296669c08a23bd31223ed049343be1a7e0f5fdcca4c91c6c9d8a23aa846928308b8e92a4a428f8cb1654150c90caf557348d180f3bb8da1b425a587a3f38c2dac8645b4cccf818f8654207f75c992fc438fcd089ce2e3cc625d1c2a13fe856db152fbf228d4cfd56a220e71768dbc69ff1e38d244cd02aa64ed4c5eb0330397ca66a732e96b8b3c7ec70aff9f00ef1ac9d1fcdd0a364c298cb164e7c1f698f6bbeb224654d252d33d8104391dd475414a74cfdf78ebda5f4320ea62cc1d99699a2dd8eab2d4bf1c6016e3e1d45b96233736fdc09e74a2d33b32ab97355d59b7e708cb4e6c66dcaf781175a577828eb4ab8ee5a4d2568ce308e0b27c87b8b4e20776672e3ae1efc3af0b7f8ce0871a29b29d9537f8d40eda0b36a6d7e86e9a1d67973b2fc0d4d1a97c0691f069f3399c243d3da61386712859a562a29c0b76c69402a120f80065c85b5e51109781311a7c13d930e8041b789ac2a4011924be012a265d57aca427eed28a4c5e32ded77e51ecc43f2fc2604d3194a641f248be974671478d469af443b186da338173b6b697a461a325f8511e48c5c12a811c8be0ac20935d1514b7c75a861e563a91772e41a064b912aae7bff4ad0ff367b5eb1b2075012c443c22d909edc3b70b683904e352f9570251d1edc958476db047e7827bfd9e55c3d122b52958c4befa9899b7d8c811090e8c46dd6af3ce6e27635187bf3d5369b6965130d83fc0cb9f4dd245b15b0c195ee5ce56cf464ce2dd2676e6e40b0eb3d24ed6438b54d4c45904877680ec341b17f30cbe2e6411b6f434f27c30e4b1abc939decc397e1adae121e15355f600f791733f5519e2090c0f1ba623a0d2bfe1d313d72d9c87c74754d74f3c1089f327944e6ae1b774c4e4a4d561e0374b071e81af5f21a272f56f5ea19e31d028024b48d44ca879570e7e371d91533ced593e62a787d762794536e42418cf707929203008d11a2466a02254c00f38714da29d9dd28041d1f31e8671142fda39694755f956d687b6463c73ea0f0ff36b8a85d2c28d9e50a4c457d66e9f52a15478daa88c1ffabf669e3096b5938f45930b1e65eb516f845e6f3cec329ca49bfc7f1cdc5580e5a461b2929ce928a76c739a35cefe1e023e7da328213e6359be2dd1cb9d287522118636ec1a21a2cc6e8f5c3aa071e49284cfa409993972f9adfb269993f2461ce7bcfbfa92839603e8d9cd143be98136ee50897ee993193568c1461ab8b5d1ede264435fbfa5eee4a6c34bb9b3fc75e7e6e859753ee7ee71861d64f11a94f2c7a8c71525916ad568324481590a4bae9c97f6da67960f68381d77161e31327e1012aa167a5e6ba22542e5ddc0d5d467e7a3a460b4d3012c3e6115457cc25ffe1fb1e6784510cf3fab765b80e69de0edaa880e8089cde790c59797dd3dbbdb139bd71675eee8f2fa800ed1f7c5ffbd43e7453584f47b382cb1d0f607c42100d31164315e52a4921da7c5110dab51187859ef8225799df5123d9abf6ce14810dffbcb96b510d87915f5d5bbbc279f7e5b3a4b6a4ae5e6a2bb5aa5369065393cc8b20d788e0230fc9b0aa8eb5e80502a5386e5177dc789d055ebc533e5e66321b7e80624ad6c4c101a002963dff9ecf79c2579474907b8b42d6565830756c1b70924164b0a007963da5aa27adf00ba4473cef126e1e006b35c38ce284588fa7d8b03a689ffd666b1a59be8e026f7e15519abbcaa715ddf35aaee45cce8f555244f49af28795569b8631c65ac2c53fe61bf1fc234dbe793b26d718b9e6dcc3f622d8623ef1d0eb0db88e40274f10b906352fb0e406bacd30d0bc9f077fb2805f88e6e0bbbd5b7493b3765331e989551f39124e3674fe4d3c8c1f7e12e685394b7ef000035bea953acf515a925454fa3c5af20a09fee9b8f67dbc75a4e8654a3af690a90e99ae19b7a3200fda044f6409aac4d107cb56a34cda1270727f82ae5d10ff7e8a7aa1aa0b287c25f5f79a4d47123e655a95cdeaabf79c82dfb3f7d226219adabb03353395b809be4c1cda7d8a6598df3ba549349fc5d8855c9147302f0515b8bfd117473acc735129b3c71627bb479643ff8e9698ff70e6d2f0aefbdc3430c1ffffa20f3be1a51a18176ace1db1c262208ada83d4829e939daad46f8f13967e6e75a7d52692a9fb60cf76817de0ec57cfe46b30e2903a66b1893324e1e8375a524caca1885324ebfce48d0fc6de022026c70b8b86579987a789b5af55013430b6bbc50a4137438536214f6447252771e90bf7c90e4729cad7653011ac7618647167ec78e79e7ea9942048611f786be3025de0629c83c12f6f574660713ac008e7edf6a0c5275664814c359335e3aef7a0e11480fb2f01281bc40b1b5a47cff7d1aba2547b0b54f73ea12ceeb7d9c6507f6961a05e4b635c2752706d49168670671cc859fd4f70663a459649d5687467309b4ab54c9989c78f871afa31a53ba9e01ac4509839010723d28e7e749f8cc435907a2e521138fe4b8e83863eb0f22613c09170c1792dc5408eb578b6cc02a8ec8c76120aea1e8b80b95e1d5a2d1b55f7cc4bd64b3b4fc869210848757ca3010167299ffc363781b98c3adf53ba78f4a8bc1da611b81ef44a6cc89cca46fd577e74340130184ffd6c12e445871f876562b9f605829d87501ae81e3647dc26fd6a2c351d49a43e852946a1a7e9055927a05dd1741512d6f318f8ac66998489f77de53b322ce5a5694a0785801226e4b1538b764f504c89937c6fbf48764d52d8f6bb6499d23880f9e0a4ec67e44883d4ea2e8319447f5a3e6077b679170ee88d3bbec0153410c0e2e5bdf4f35ad5e6fee2d14555dec9be7ebf29d5620c700b953eae046f4734bce0ba1aa4b59f0f7a47c86bc310e75bd0841a250b0eebd78f2ecc5df5303699ff8a5687bfe57ecc84c27904d3b1df7e3b483f48cf85d8a1c35e548563e4d6bc2121b9171ce47da53da300a4776580a1514f98245b5790161d997e823ff129af4bbb9e1edc57af60c56bcd25495b93da14b0cce29462267477564aceead895bc0438d94d0cff1e7e36784917cdbd706e8f3a6ab7566785ec2580eeace858cbaf9a7d7ccea70168cdb43fb243ef7c69706bdb8b9a6bcda63997cdbd4a548596791761f8ad816bbe8eb1c340e3344c3850e2141a28050be0502c8531cb90209c05aeca95a7d728b4d816cf7b325f853c8b75412f1b5129d709cc87dff6514084dff1da42ca4530aadc68dd41e1027f7a9c2bfb82e7085c8e6660fab1290b225c4ab7f8d68a9355257147f64b94b6f380a6ff39d0ecd1944df234b45dc3ba204a6845cacf5942012b144ba47818d5fb1dd7c345f3479591840a6a72347bd3c977b99f9cde1caa9a07833d305a10f3006b57758c4a54979323b208b1f843385445b26595692a00ef8f41c96f2396a43514e4856d5ae196817cc27f38e073b7caf3a7ef48c7a496aa22fee1ce3c0b52f910eaa3e4ea446a7148662533b4e7442095b96dd7ee6fe0f3ed2d9ffa87b44fd7231dca324917e3c848e58b1cf075007df076d60c5bbbcfef113977cde3023fa63273f8c7c2410e70ad3ed093b4b6648c6be2f4bf49b59c6350bbba20125545a28d0e736e4a0213bb7dfcb45e98a67bd4b8fb950c9f6f4eeda4123a4a28344350a2b788176f8d04ab630dff83b50ba9eb034189e5f6c4e02b6934f11685a21998ea09e705f4a4bc4f7137aa8a527c881d30dab87d5f98fc35a0fe5132ddf88cbb25473db9c1e92b957196b2098d4f402a9a6ae2cc140939155fa77482b6ccf418d281faa4dd39b0d990539f1df4877a7af136063e8576c61427b96680dd58d8386b44f7876d22fc27c0409760517cfd7ca95ca54203c69c1ad20dd2f259fe43d7fba96a39ba83d206676484e9c8718de5932756a37f551702467e5ed433be3270eb7fb140c3b12355db37b96579cb5a0b55cdf074966943763d627d82d6a433cdfcd6be805ab482429de789786b67dbdc1ba4706c1bcc6dd1492ebff442ccf2b3249b0faf34a57b2e3ed1986c15b854e05551811dbf46b6b9847adc7bb51490e6767882b90048eeb83436bbd00dd7e29e78dbe32ad039d4662bda14ec6b55fc03b95cd53a6567f48b9b01f8025ce91be805dc401344553e5107b88dfd9d4442c1d199a4b2b9e69e8708945cd14571ed3f81184bc9fe203adbeddcf81836ca829852b57bfa861a074b1e922c9afcb12250f10be0d5a417bc03abfd70f170447d68d31ee9f0969a59c0ccdbbfcb3691528989603fd363bb72624730d3a8806ca6a1ca1894b08516d793c5c6b73e48ea882518dac878e45a5b4554bc05f671cbc56bf5f9b2dbb900db8bdc629532691ac5c88769aeacf03aa86f703ce1102cbb3efef9e5d6ba84ff94b6b6d44bb06a424ae22afaa76a6a04948c68b59e7b6e555e87534e18435fcdb663f7540e913219a1fcc86b38cb6e9dab3e74ef57ce26537970acec4a2e2ce3f45262e039ad92e629b5fe4e6875aab355999dd64b2037a03abd9f8ef4afa14800a25e063b4308462f46025a7e9b779a1108bbf9aae1735e09d748681d3f6eba6fac1298664a95bfe8b3720a33da928250a8496fc50a92886c47972ec4a2bfcfad2d9a5e06fe41b16f17d3b5ebfef9d0b0b968415d76972baa240a83051d0d139403b5e74ec82ffae798d7d05719264c2aff4c2b4695972122f46a0f62359ae0821b85ec"}, 0x1004) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8=0x0], 0xdf) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "7171eef261f5235d76cb01704d6584e747061caa04b7470a183d0a3b66b8f0d247b0557e9a8d4a43925bbfc958502fbe5f650591c5e4b7807c48f517e00e588331d76225a38665a57bab3e91a7311ebca747e50f7a32735356a1023a124aab61fb8e926e82311799a96484da6143783b4084e2d378d42de4ba5abb44fab3f6ff9563d0c2c7857716add4aa36268236efe1114323506ed109f838447b4f81824b5b7089bb63cd1b83373246b899111f9ecb1fdaf84cd9c02a90489c82fcff4fed91f51e325e7e52644b93e83426df50eda67196b8ce49e75b70c496a28c345cac1b39e7080c124288ba9f17eb87e2ba1cb82abb1d0d1eb20b70d329e30dda10d9f4df37f54c4ed01e79e8dc1f8885997b860ade72dee91b41d665b0b9eeb1d7a1ded63ad71985e077e7700a73dd5a41692de48f6deaf2eca3fe335a37f7d11754c9492b35d7038bd60ec03557b6bc54da457d89b486cf53bec0476a3608d09a73d328e6183afe84a92e835ed476a33883d56189d38edea4d973fc89bce1c57c9cf86e46d3034e0bd5c7d9ae9ac4c40e44de869ccb095a1680240765c21a9d7cc4c8b7f48601c2de625dc2b95adab0ed15cdb6c9e382482eae3db465f4d192bdfe40a9507a54cc95e2f5af2f9912474bce94c2e98ccf3fd614b327a173e9f585f670cba3aa9aa2b6b0fdd4d9e4e7752eb33375be71b4c5fd099aef47e3dd2dd8aa417350b0627ff4218bae8e8f43b71332da99b7d5c3a744370c230eaec822944744627411711ece732b383b2ffea0b0be31ef5830c56fa2f917d8b019166c160480a818b20f96ce152cf70855af48986cc56056d216f8eef2e980695ef3a9c5c64b336feaa9aa2cca89c2b7b89b8cb8e179efd2eacf82089de739bfc48c66767f332be02461d921363533c6e10d1084db02fe000cb8bbce871ebcf08fa91d48401b40ab3f526e00912c62990df4385a230baec76fb9741635045ffdcba48611e9a45f244b159ae1d812c18ec7384acdfe83237dc84f81b14f3cb0f3294c0846e1326485b111475683e85d5dc8f51fe56607b3eff4196babaee8414f296669c08a23bd31223ed049343be1a7e0f5fdcca4c91c6c9d8a23aa846928308b8e92a4a428f8cb1654150c90caf557348d180f3bb8da1b425a587a3f38c2dac8645b4cccf818f8654207f75c992fc438fcd089ce2e3cc625d1c2a13fe856db152fbf228d4cfd56a220e71768dbc69ff1e38d244cd02aa64ed4c5eb0330397ca66a732e96b8b3c7ec70aff9f00ef1ac9d1fcdd0a364c298cb164e7c1f698f6bbeb224654d252d33d8104391dd475414a74cfdf78ebda5f4320ea62cc1d99699a2dd8eab2d4bf1c6016e3e1d45b96233736fdc09e74a2d33b32ab97355d59b7e708cb4e6c66dcaf781175a577828eb4ab8ee5a4d2568ce308e0b27c87b8b4e20776672e3ae1efc3af0b7f8ce0871a29b29d9537f8d40eda0b36a6d7e86e9a1d67973b2fc0d4d1a97c0691f069f3399c243d3da61386712859a562a29c0b76c69402a120f80065c85b5e51109781311a7c13d930e8041b789ac2a4011924be012a265d57aca427eed28a4c5e32ded77e51ecc43f2fc2604d3194a641f248be974671478d469af443b186da338173b6b697a461a325f8511e48c5c12a811c8be0ac20935d1514b7c75a861e563a91772e41a064b912aae7bff4ad0ff367b5eb1b2075012c443c22d909edc3b70b683904e352f9570251d1edc958476db047e7827bfd9e55c3d122b52958c4befa9899b7d8c811090e8c46dd6af3ce6e27635187bf3d5369b6965130d83fc0cb9f4dd245b15b0c195ee5ce56cf464ce2dd2676e6e40b0eb3d24ed6438b54d4c45904877680ec341b17f30cbe2e6411b6f434f27c30e4b1abc939decc397e1adae121e15355f600f791733f5519e2090c0f1ba623a0d2bfe1d313d72d9c87c74754d74f3c1089f327944e6ae1b774c4e4a4d561e0374b071e81af5f21a272f56f5ea19e31d028024b48d44ca879570e7e371d91533ced593e62a787d762794536e42418cf707929203008d11a2466a02254c00f38714da29d9dd28041d1f31e8671142fda39694755f956d687b6463c73ea0f0ff36b8a85d2c28d9e50a4c457d66e9f52a15478daa88c1ffabf669e3096b5938f45930b1e65eb516f845e6f3cec329ca49bfc7f1cdc5580e5a461b2929ce928a76c739a35cefe1e023e7da328213e6359be2dd1cb9d287522118636ec1a21a2cc6e8f5c3aa071e49284cfa409993972f9adfb269993f2461ce7bcfbfa92839603e8d9cd143be98136ee50897ee993193568c1461ab8b5d1ede264435fbfa5eee4a6c34bb9b3fc75e7e6e859753ee7ee71861d64f11a94f2c7a8c71525916ad568324481590a4bae9c97f6da67960f68381d77161e31327e1012aa167a5e6ba22542e5ddc0d5d467e7a3a460b4d3012c3e6115457cc25ffe1fb1e6784510cf3fab765b80e69de0edaa880e8089cde790c59797dd3dbbdb139bd71675eee8f2fa800ed1f7c5ffbd43e7453584f47b382cb1d0f607c42100d31164315e52a4921da7c5110dab51187859ef8225799df5123d9abf6ce14810dffbcb96b510d87915f5d5bbbc279f7e5b3a4b6a4ae5e6a2bb5aa5369065393cc8b20d788e0230fc9b0aa8eb5e80502a5386e5177dc789d055ebc533e5e66321b7e80624ad6c4c101a002963dff9ecf79c2579474907b8b42d6565830756c1b70924164b0a007963da5aa27adf00ba4473cef126e1e006b35c38ce284588fa7d8b03a689ffd666b1a59be8e026f7e15519abbcaa715ddf35aaee45cce8f555244f49af28795569b8631c65ac2c53fe61bf1fc234dbe793b26d718b9e6dcc3f622d8623ef1d0eb0db88e40274f10b906352fb0e406bacd30d0bc9f077fb2805f88e6e0bbbd5b7493b3765331e989551f39124e3674fe4d3c8c1f7e12e685394b7ef000035bea953acf515a925454fa3c5af20a09fee9b8f67dbc75a4e8654a3af690a90e99ae19b7a3200fda044f6409aac4d107cb56a34cda1270727f82ae5d10ff7e8a7aa1aa0b287c25f5f79a4d47123e655a95cdeaabf79c82dfb3f7d226219adabb03353395b809be4c1cda7d8a6598df3ba549349fc5d8855c9147302f0515b8bfd117473acc735129b3c71627bb479643ff8e9698ff70e6d2f0aefbdc3430c1ffffa20f3be1a51a18176ace1db1c262208ada83d4829e939daad46f8f13967e6e75a7d52692a9fb60cf76817de0ec57cfe46b30e2903a66b1893324e1e8375a524caca1885324ebfce48d0fc6de022026c70b8b86579987a789b5af55013430b6bbc50a4137438536214f6447252771e90bf7c90e4729cad7653011ac7618647167ec78e79e7ea9942048611f786be3025de0629c83c12f6f574660713ac008e7edf6a0c5275664814c359335e3aef7a0e11480fb2f01281bc40b1b5a47cff7d1aba2547b0b54f73ea12ceeb7d9c6507f6961a05e4b635c2752706d49168670671cc859fd4f70663a459649d5687467309b4ab54c9989c78f871afa31a53ba9e01ac4509839010723d28e7e749f8cc435907a2e521138fe4b8e83863eb0f22613c09170c1792dc5408eb578b6cc02a8ec8c76120aea1e8b80b95e1d5a2d1b55f7cc4bd64b3b4fc869210848757ca3010167299ffc363781b98c3adf53ba78f4a8bc1da611b81ef44a6cc89cca46fd577e74340130184ffd6c12e445871f876562b9f605829d87501ae81e3647dc26fd6a2c351d49a43e852946a1a7e9055927a05dd1741512d6f318f8ac66998489f77de53b322ce5a5694a0785801226e4b1538b764f504c89937c6fbf48764d52d8f6bb6499d23880f9e0a4ec67e44883d4ea2e8319447f5a3e6077b679170ee88d3bbec0153410c0e2e5bdf4f35ad5e6fee2d14555dec9be7ebf29d5620c700b953eae046f4734bce0ba1aa4b59f0f7a47c86bc310e75bd0841a250b0eebd78f2ecc5df5303699ff8a5687bfe57ecc84c27904d3b1df7e3b483f48cf85d8a1c35e548563e4d6bc2121b9171ce47da53da300a4776580a1514f98245b5790161d997e823ff129af4bbb9e1edc57af60c56bcd25495b93da14b0cce29462267477564aceead895bc0438d94d0cff1e7e36784917cdbd706e8f3a6ab7566785ec2580eeace858cbaf9a7d7ccea70168cdb43fb243ef7c69706bdb8b9a6bcda63997cdbd4a548596791761f8ad816bbe8eb1c340e3344c3850e2141a28050be0502c8531cb90209c05aeca95a7d728b4d816cf7b325f853c8b75412f1b5129d709cc87dff6514084dff1da42ca4530aadc68dd41e1027f7a9c2bfb82e7085c8e6660fab1290b225c4ab7f8d68a9355257147f64b94b6f380a6ff39d0ecd1944df234b45dc3ba204a6845cacf5942012b144ba47818d5fb1dd7c345f3479591840a6a72347bd3c977b99f9cde1caa9a07833d305a10f3006b57758c4a54979323b208b1f843385445b26595692a00ef8f41c96f2396a43514e4856d5ae196817cc27f38e073b7caf3a7ef48c7a496aa22fee1ce3c0b52f910eaa3e4ea446a7148662533b4e7442095b96dd7ee6fe0f3ed2d9ffa87b44fd7231dca324917e3c848e58b1cf075007df076d60c5bbbcfef113977cde3023fa63273f8c7c2410e70ad3ed093b4b6648c6be2f4bf49b59c6350bbba20125545a28d0e736e4a0213bb7dfcb45e98a67bd4b8fb950c9f6f4eeda4123a4a28344350a2b788176f8d04ab630dff83b50ba9eb034189e5f6c4e02b6934f11685a21998ea09e705f4a4bc4f7137aa8a527c881d30dab87d5f98fc35a0fe5132ddf88cbb25473db9c1e92b957196b2098d4f402a9a6ae2cc140939155fa77482b6ccf418d281faa4dd39b0d990539f1df4877a7af136063e8576c61427b96680dd58d8386b44f7876d22fc27c0409760517cfd7ca95ca54203c69c1ad20dd2f259fe43d7fba96a39ba83d206676484e9c8718de5932756a37f551702467e5ed433be3270eb7fb140c3b12355db37b96579cb5a0b55cdf074966943763d627d82d6a433cdfcd6be805ab482429de789786b67dbdc1ba4706c1bcc6dd1492ebff442ccf2b3249b0faf34a57b2e3ed1986c15b854e05551811dbf46b6b9847adc7bb51490e6767882b90048eeb83436bbd00dd7e29e78dbe32ad039d4662bda14ec6b55fc03b95cd53a6567f48b9b01f8025ce91be805dc401344553e5107b88dfd9d4442c1d199a4b2b9e69e8708945cd14571ed3f81184bc9fe203adbeddcf81836ca829852b57bfa861a074b1e922c9afcb12250f10be0d5a417bc03abfd70f170447d68d31ee9f0969a59c0ccdbbfcb3691528989603fd363bb72624730d3a8806ca6a1ca1894b08516d793c5c6b73e48ea882518dac878e45a5b4554bc05f671cbc56bf5f9b2dbb900db8bdc629532691ac5c88769aeacf03aa86f703ce1102cbb3efef9e5d6ba84ff94b6b6d44bb06a424ae22afaa76a6a04948c68b59e7b6e555e87534e18435fcdb663f7540e913219a1fcc86b38cb6e9dab3e74ef57ce26537970acec4a2e2ce3f45262e039ad92e629b5fe4e6875aab355999dd64b2037a03abd9f8ef4afa14800a25e063b4308462f46025a7e9b779a1108bbf9aae1735e09d748681d3f6eba6fac1298664a95bfe8b3720a33da928250a8496fc50a92886c47972ec4a2bfcfad2d9a5e06fe41b16f17d3b5ebfef9d0b0b968415d76972baa240a83051d0d139403b5e74ec82ffae798d7d05719264c2aff4c2b4695972122f46a0f62359ae0821b85ec"}, 0x1004) (async) 19:55:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043c07aaaaa2aaaa1109"], 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:18 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x3}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x8, 0x4}, {0x0, 0x2000}}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x79}, @l2cap_cid_signaling={{0x75}, [@l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}}, @l2cap_conf_req={{0x4, 0x40, 0x6b}, {0x1, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x1, 0x9, 0x0, 0x101, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x8e, 0x1, 0x8, 0x3, 0xdb6, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x0, 0x6, 0x9, 0x20}}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_flushto={0x2, 0x2, 0x7f}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x8, 0x7, 0x2, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x7, 0x5, 0x7f, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xa7, 0xc0, 0x0, 0x7, 0x3f}}]}}]}}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x3}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x8, 0x4}, {0x0, 0x2000}}}}, 0x6) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x79}, @l2cap_cid_signaling={{0x75}, [@l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}}, @l2cap_conf_req={{0x4, 0x40, 0x6b}, {0x1, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x1, 0x9, 0x0, 0x101, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x8e, 0x1, 0x8, 0x3, 0xdb6, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x0, 0x6, 0x9, 0x20}}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_flushto={0x2, 0x2, 0x7f}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x8, 0x7, 0x2, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x7, 0x5, 0x7f, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xa7, 0xc0, 0x0, 0x7, 0x3f}}]}}]}}, 0x7e) (async) [ 419.349984][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 419.357801][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 201 19:55:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x4e) (async, rerun: 64) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) (async, rerun: 64) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) (async, rerun: 32) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee00, 0xee01, 0x80}, 0x0, 0x7}) (async, rerun: 32) setresuid(0xee01, 0xee00, 0x0) (async, rerun: 32) getegid() (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200), 0xc, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x44) (async) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) (async, rerun: 64) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x1040000, 0x0) (rerun: 64) getresuid(0x0, 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) getpid() (async) sched_setscheduler(0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0x4}}, 0x9) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/237, 0xed}, {&(0x7f00000006c0)=""/222, 0xde}], 0x9, &(0x7f00000009c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000880)=""/255, 0xff}, &(0x7f0000000980)}}], 0x30, 0x4000014}, 0x8084) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value={0x0}, &(0x7f0000000a80)=0x8) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000ac0)={r2, @in={{0x2, 0x4e24, @local}}, 0x6, 0x3}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000b80)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20, 0x4, 0x5, 0x7, 0xe4, 0xe1, 0xff}, &(0x7f0000000100)=0x9c) 19:55:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043c07aaaaa2aaaa1109"], 0xa) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:18 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xdf) 19:55:18 executing program 1: setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0xffff, 0x8001, 0x7, 0x1ff, 0x800, 0x5, 0x800}, &(0x7f00000000c0)=0x20) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e5fe5e6e41c4e7470c30000ffffffffffff000088870000"], 0x20) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0xffff, 0x8001, 0x7, 0x1ff, 0x800, 0x5, 0x800}, &(0x7f00000000c0)=0x20) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e5fe5e6e41c4e7470c30000ffffffffffff000088870000"], 0x20) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) 19:55:18 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x3}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x8, 0x4}, {0x0, 0x2000}}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x79}, @l2cap_cid_signaling={{0x75}, [@l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}}, @l2cap_conf_req={{0x4, 0x40, 0x6b}, {0x1, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x1, 0x9, 0x0, 0x101, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x8e, 0x1, 0x8, 0x3, 0xdb6, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x0, 0x6, 0x9, 0x20}}, @l2cap_conf_ews={0x7, 0x2, 0x1000}, @l2cap_conf_flushto={0x2, 0x2, 0x7f}, @l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x8, 0x7, 0x2, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x40, 0x7, 0x5, 0x7f, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xa7, 0xc0, 0x0, 0x7, 0x3f}}]}}]}}, 0x7e) [ 419.461278][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 419.474149][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 419.482831][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 419.495334][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 201 19:55:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f238ba21c5f906bc20078661ca"}}}, 0x102) [ 419.582226][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 419.590285][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 201 19:55:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f238ba21c5f906bc20078661ca"}}}, 0x102) 19:55:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:18 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x8, 0x800) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000080000007538cb7464d49f54de903e97b5990a4cb9bd49b9ec554d85bac4a5b927d11b82e9eb4d628fcb5362f253c1ea923e401adbf898bd062d52660fc10ea28102e1ebd6e52010b1b1d49572e474f5b83e8be67a4f25545899404f3f84339ad27238518eba3437439c6f35313ea2c07aa3c6b43ce3303613f4de05e06db58ac36982c936d50a35a04fc5a9e8a0cfbc18248647a0b893244f871385e726e22cecb7000000000000000000000000d203abf4e05b01769566aac3543bc59b1f7dce49bcc5ed686c67b95cc9dad7114c0ede39d7e5aeba5b0503a71c"], 0x11) 19:55:18 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xdf) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xdf) (async) 19:55:18 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a527bd40eb030200c0ba000000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "d1aa61f01dcf6a67974b7108641be3b90c000000000000000000a400"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb0}, "8b89d26205641e3479fe752ef3837af84006d3fc532a2f2a826ee9796553be7c5b807954632119ea92556859a81d4f9b5ac9ff1d77ed1a53893e9f8ff15c37b547589f8e4ec4a53114716fc81b6271f2179aaeff0e3e639a0538c8d6b9673887d76f1903cdf8118a5842a8119ae84c06c7374593685d4c17a650aa2cb68e879ac07beeac49845214da017c78514984265d401b277b490045e9021bdb79dbc307135961e685db6e7fc69b64cd9b824dce"}, 0xb4) 19:55:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x4e) (async) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) (async) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) (async) mlockall(0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee00, 0xee01, 0x80}, 0x0, 0x7}) (async) setresuid(0xee01, 0xee00, 0x0) getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200), 0xc, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x44) (async) ftruncate(r1, 0x2008002) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) (async) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x1040000, 0x0) (async) getresuid(0x0, 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) getpid() (async) sched_setscheduler(0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0x4}}, 0x9) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/237, 0xed}, {&(0x7f00000006c0)=""/222, 0xde}], 0x9, &(0x7f00000009c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000880)=""/255, 0xff}, &(0x7f0000000980)}}], 0x30, 0x4000014}, 0x8084) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value={0x0}, &(0x7f0000000a80)=0x8) (async) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000ac0)={r2, @in={{0x2, 0x4e24, @local}}, 0x6, 0x3}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000b80)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20, 0x4, 0x5, 0x7, 0xe4, 0xe1, 0xff}, &(0x7f0000000100)=0x9c) 19:55:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:18 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xdf) [ 419.714440][ T5130] Bluetooth: Unexpected start frame (len 218) [ 419.723183][ T5130] Bluetooth: Unexpected start frame (len 218) 19:55:18 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x8, 0x800) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000080000007538cb7464d49f54de903e97b5990a4cb9bd49b9ec554d85bac4a5b927d11b82e9eb4d628fcb5362f253c1ea923e401adbf898bd062d52660fc10ea28102e1ebd6e52010b1b1d49572e474f5b83e8be67a4f25545899404f3f84339ad27238518eba3437439c6f35313ea2c07aa3c6b43ce3303613f4de05e06db58ac36982c936d50a35a04fc5a9e8a0cfbc18248647a0b893244f871385e726e22cecb7000000000000000000000000d203abf4e05b01769566aac3543bc59b1f7dce49bcc5ed686c67b95cc9dad7114c0ede39d7e5aeba5b0503a71c"], 0x11) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x8, 0x800) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000080000007538cb7464d49f54de903e97b5990a4cb9bd49b9ec554d85bac4a5b927d11b82e9eb4d628fcb5362f253c1ea923e401adbf898bd062d52660fc10ea28102e1ebd6e52010b1b1d49572e474f5b83e8be67a4f25545899404f3f84339ad27238518eba3437439c6f35313ea2c07aa3c6b43ce3303613f4de05e06db58ac36982c936d50a35a04fc5a9e8a0cfbc18248647a0b893244f871385e726e22cecb7000000000000000000000000d203abf4e05b01769566aac3543bc59b1f7dce49bcc5ed686c67b95cc9dad7114c0ede39d7e5aeba5b0503a71c"], 0x11) (async) 19:55:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f238ba21c5f906bc20078661ca"}}}, 0x102) 19:55:18 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x8, 0x800) (async) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000080000007538cb7464d49f54de903e97b5990a4cb9bd49b9ec554d85bac4a5b927d11b82e9eb4d628fcb5362f253c1ea923e401adbf898bd062d52660fc10ea28102e1ebd6e52010b1b1d49572e474f5b83e8be67a4f25545899404f3f84339ad27238518eba3437439c6f35313ea2c07aa3c6b43ce3303613f4de05e06db58ac36982c936d50a35a04fc5a9e8a0cfbc18248647a0b893244f871385e726e22cecb7000000000000000000000000d203abf4e05b01769566aac3543bc59b1f7dce49bcc5ed686c67b95cc9dad7114c0ede39d7e5aeba5b0503a71c"], 0x11) 19:55:18 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7}, "574f1bb3bfc8c4"}, 0xb) 19:55:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, r1, 0xd9120000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x6, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc58009170146409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8585c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 419.812846][ T5130] Bluetooth: Unexpected start frame (len 218) 19:55:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 419.901310][ T5130] Bluetooth: Unexpected start frame (len 218) 19:55:18 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a527bd40eb030200c0ba000000010902115c01000000000904000001b504b100090581"], 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "d1aa61f01dcf6a67974b7108641be3b90c000000000000000000a400"}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb0}, "8b89d26205641e3479fe752ef3837af84006d3fc532a2f2a826ee9796553be7c5b807954632119ea92556859a81d4f9b5ac9ff1d77ed1a53893e9f8ff15c37b547589f8e4ec4a53114716fc81b6271f2179aaeff0e3e639a0538c8d6b9673887d76f1903cdf8118a5842a8119ae84c06c7374593685d4c17a650aa2cb68e879ac07beeac49845214da017c78514984265d401b277b490045e9021bdb79dbc307135961e685db6e7fc69b64cd9b824dce"}, 0xb4) 19:55:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7}, "574f1bb3bfc8c4"}, 0xb) (rerun: 32) 19:55:18 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:18 executing program 4: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000040)="8c1cd9b9c21a5a617e695d8a5cbfe83b4ada196914e53c916c3897b0f0d6b92ecb6c4d27f6b7be0ce07829610b526d5e17198df13726f329ec92fd4fd7c587b30daff8c7ccd87166cfb6dd5105e63f6f905a94a09a72d1b1b010ab1f0245de12d0f4f59e3870d6bd8347da4810d2533f47a22090639e7b527c91d5a0a9402d878ef5955609c60d62c88cf27e597516453baf3f4703d25eedb98383c54805eecdf0aa56168d6dd7d6e0af") 19:55:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) (async) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, r1, 0xd9120000) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x6, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc58009170146409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8585c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:18 executing program 4: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000040)="8c1cd9b9c21a5a617e695d8a5cbfe83b4ada196914e53c916c3897b0f0d6b92ecb6c4d27f6b7be0ce07829610b526d5e17198df13726f329ec92fd4fd7c587b30daff8c7ccd87166cfb6dd5105e63f6f905a94a09a72d1b1b010ab1f0245de12d0f4f59e3870d6bd8347da4810d2533f47a22090639e7b527c91d5a0a9402d878ef5955609c60d62c88cf27e597516453baf3f4703d25eedb98383c54805eecdf0aa56168d6dd7d6e0af") 19:55:18 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7}, "574f1bb3bfc8c4"}, 0xb) 19:55:19 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) (async) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, r1, 0xd9120000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x6, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc58009170146409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8585c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:19 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xe611a757f97636d, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0xef}}}}, 0xf) [ 420.407514][ T5130] Bluetooth: hci2: command 0x0409 tx timeout [ 420.435732][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 877 [ 420.497741][ T5130] Bluetooth: hci4: command 0x0409 tx timeout 19:55:19 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a527bd40eb030200c0ba000000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "d1aa61f01dcf6a67974b7108641be3b90c000000000000000000a400"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb0}, "8b89d26205641e3479fe752ef3837af84006d3fc532a2f2a826ee9796553be7c5b807954632119ea92556859a81d4f9b5ac9ff1d77ed1a53893e9f8ff15c37b547589f8e4ec4a53114716fc81b6271f2179aaeff0e3e639a0538c8d6b9673887d76f1903cdf8118a5842a8119ae84c06c7374593685d4c17a650aa2cb68e879ac07beeac49845214da017c78514984265d401b277b490045e9021bdb79dbc307135961e685db6e7fc69b64cd9b824dce"}, 0xb4) 19:55:19 executing program 4: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000040)="8c1cd9b9c21a5a617e695d8a5cbfe83b4ada196914e53c916c3897b0f0d6b92ecb6c4d27f6b7be0ce07829610b526d5e17198df13726f329ec92fd4fd7c587b30daff8c7ccd87166cfb6dd5105e63f6f905a94a09a72d1b1b010ab1f0245de12d0f4f59e3870d6bd8347da4810d2533f47a22090639e7b527c91d5a0a9402d878ef5955609c60d62c88cf27e597516453baf3f4703d25eedb98383c54805eecdf0aa56168d6dd7d6e0af") 19:55:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x977c}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r3], 0x59) write(r2, &(0x7f00000001c0)="5ff709b5ecc897acb7a559dcb083e1cdbb3238744c9f7cb80e9ef49c1d", 0x1d) 19:55:19 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xe611a757f97636d, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0xef}}}}, 0xf) 19:55:19 executing program 2: ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@null, 0xf, 'bridge_slave_1\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8502b00270001000601040011ff040002000600000008000700040086001f00117f02003f002320050004000008ff"], 0x30) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x18}, "38a002d398da32947a16d6224ccd506c21219fe07f480d67"}, 0x1c) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x38}, @l2cap_cid_signaling={{0x34}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfffa, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x2, 0xf089, 0x101, 0xfbff}}, @l2cap_move_chan_cfm={{0x10, 0x81, 0x4}, {0x1ff, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x7, 0x3}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0xfffe, 0x6390}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0xa8, 0x7fff}}]}}, 0x3d) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x8, 0x8}, {0xffff, 0x1000, 0x86, 0x2433}}}}, 0x15) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x9, 0xfb, 0x40, 0x8}, {0x5, 0x20, 0x2, 0x3f}, {0x7f, 0x40, 0x6, 0x2}]}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "0c2fc47ac4ab9c168c885bf362ed99effc49cdea7e3eaae051edf6c412d65d43fae9d295ab4cb5e1b10cef973c039446fe5fc179c20878330d766e9b944124c71c0f83697393725e6f62fc13666652fb2372624bbb2cf136012fcd58859a3abec26a773a54027d572f788b1e4201c0b7792590cb47407f60a60f81ede6483a63439658e357db949caec0f5e9af8df6192114ebd884055c7751bd1362f1939df08126d1c8ae36f7f766cc1a6693ee6a9411835858"}, 0xb8) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0x4, 0xffffff7f}, @TCA_FQ_PIE_ALPHA={0x8}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x44, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0x10, 0x0, 0xfe, 0x2, 0xfe, 0x5, 0x300}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf7}, @RTA_VIA={0x14, 0x12, {0x2a, "3c49847cdbd02b60c640f669f9ad"}}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x13, 0x3, r4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:19 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:19 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:19 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xe611a757f97636d, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0xef}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xe611a757f97636d, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1, 0x2}, {0xef}}}}, 0xf) (async) 19:55:19 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = socket(0x28, 0x5, 0x0) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x101, 0x8, 0x5, 0x7, 0x81}) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r3) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) kcmp(0x0, r6, 0x1, r0, r0) r7 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x18480) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000327bd7800fddbdf330a0000000cc6000200000000000e091c0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES16=r1], 0x11) sched_setscheduler(r6, 0x1, &(0x7f0000000140)=0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043c07ffffffffff7502"], 0xa) [ 420.892435][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 877 [ 420.902896][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 420.924132][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x977c}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r3], 0x59) (async) write(r2, &(0x7f00000001c0)="5ff709b5ecc897acb7a559dcb083e1cdbb3238744c9f7cb80e9ef49c1d", 0x1d) 19:55:19 executing program 2: ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@null, 0xf, 'bridge_slave_1\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8502b00270001000601040011ff040002000600000008000700040086001f00117f02003f002320050004000008ff"], 0x30) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8502b00270001000601040011ff040002000600000008000700040086001f00117f02003f002320050004000008ff"], 0x30) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x18}, "38a002d398da32947a16d6224ccd506c21219fe07f480d67"}, 0x1c) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x38}, @l2cap_cid_signaling={{0x34}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfffa, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x2, 0xf089, 0x101, 0xfbff}}, @l2cap_move_chan_cfm={{0x10, 0x81, 0x4}, {0x1ff, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x7, 0x3}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0xfffe, 0x6390}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0xa8, 0x7fff}}]}}, 0x3d) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x8, 0x8}, {0xffff, 0x1000, 0x86, 0x2433}}}}, 0x15) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x9, 0xfb, 0x40, 0x8}, {0x5, 0x20, 0x2, 0x3f}, {0x7f, 0x40, 0x6, 0x2}]}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "0c2fc47ac4ab9c168c885bf362ed99effc49cdea7e3eaae051edf6c412d65d43fae9d295ab4cb5e1b10cef973c039446fe5fc179c20878330d766e9b944124c71c0f83697393725e6f62fc13666652fb2372624bbb2cf136012fcd58859a3abec26a773a54027d572f788b1e4201c0b7792590cb47407f60a60f81ede6483a63439658e357db949caec0f5e9af8df6192114ebd884055c7751bd1362f1939df08126d1c8ae36f7f766cc1a6693ee6a9411835858"}, 0xb8) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0x4, 0xffffff7f}, @TCA_FQ_PIE_ALPHA={0x8}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x44, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0x10, 0x0, 0xfe, 0x2, 0xfe, 0x5, 0x300}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf7}, @RTA_VIA={0x14, 0x12, {0x2a, "3c49847cdbd02b60c640f669f9ad"}}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x13, 0x3, r4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x44, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0x10, 0x0, 0xfe, 0x2, 0xfe, 0x5, 0x300}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf7}, @RTA_VIA={0x14, 0x12, {0x2a, "3c49847cdbd02b60c640f669f9ad"}}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x13, 0x3, r4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:19 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 420.948365][T13750] Zero length message leads to an empty skb [ 420.969300][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 877 [ 420.977148][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 877 [ 421.067065][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 421.075157][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 421.076191][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 19:55:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x977c}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r3], 0x59) (async) write(r2, &(0x7f00000001c0)="5ff709b5ecc897acb7a559dcb083e1cdbb3238744c9f7cb80e9ef49c1d", 0x1d) 19:55:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = socket(0x28, 0x5, 0x0) (async) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x101, 0x8, 0x5, 0x7, 0x81}) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r3) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) kcmp(0x0, r6, 0x1, r0, r0) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x18480) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000327bd7800fddbdf330a0000000cc6000200000000000e091c0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES16=r1], 0x11) (async) sched_setscheduler(r6, 0x1, &(0x7f0000000140)=0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043c07ffffffffff7502"], 0xa) 19:55:20 executing program 2: ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@null, 0xf, 'bridge_slave_1\x00'}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8502b00270001000601040011ff040002000600000008000700040086001f00117f02003f002320050004000008ff"], 0x30) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x18}, "38a002d398da32947a16d6224ccd506c21219fe07f480d67"}, 0x1c) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x38}, @l2cap_cid_signaling={{0x34}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfffa, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x2, 0xf089, 0x101, 0xfbff}}, @l2cap_move_chan_cfm={{0x10, 0x81, 0x4}, {0x1ff, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x7, 0x3}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0xfffe, 0x6390}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0xa8, 0x7fff}}]}}, 0x3d) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x8, 0x8}, {0xffff, 0x1000, 0x86, 0x2433}}}}, 0x15) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x9, 0xfb, 0x40, 0x8}, {0x5, 0x20, 0x2, 0x3f}, {0x7f, 0x40, 0x6, 0x2}]}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "0c2fc47ac4ab9c168c885bf362ed99effc49cdea7e3eaae051edf6c412d65d43fae9d295ab4cb5e1b10cef973c039446fe5fc179c20878330d766e9b944124c71c0f83697393725e6f62fc13666652fb2372624bbb2cf136012fcd58859a3abec26a773a54027d572f788b1e4201c0b7792590cb47407f60a60f81ede6483a63439658e357db949caec0f5e9af8df6192114ebd884055c7751bd1362f1939df08126d1c8ae36f7f766cc1a6693ee6a9411835858"}, 0xb8) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0x4, 0xffffff7f}, @TCA_FQ_PIE_ALPHA={0x8}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x44, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0x10, 0x0, 0xfe, 0x2, 0xfe, 0x5, 0x300}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf7}, @RTA_VIA={0x14, 0x12, {0x2a, "3c49847cdbd02b60c640f669f9ad"}}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x13, 0x3, r4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@null, 0xf, 'bridge_slave_1\x00'}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c8502b00270001000601040011ff040002000600000008000700040086001f00117f02003f002320050004000008ff"], 0x30) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x18}, "38a002d398da32947a16d6224ccd506c21219fe07f480d67"}, 0x1c) (async) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x38}, @l2cap_cid_signaling={{0x34}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfffa, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x2, 0xf089, 0x101, 0xfbff}}, @l2cap_move_chan_cfm={{0x10, 0x81, 0x4}, {0x1ff, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x7, 0x3}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0xfffe, 0x6390}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0xa8, 0x7fff}}]}}, 0x3d) (async) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x8, 0x8}, {0xffff, 0x1000, 0x86, 0x2433}}}}, 0x15) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x9, 0xfb, 0x40, 0x8}, {0x5, 0x20, 0x2, 0x3f}, {0x7f, 0x40, 0x6, 0x2}]}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb4}, "0c2fc47ac4ab9c168c885bf362ed99effc49cdea7e3eaae051edf6c412d65d43fae9d295ab4cb5e1b10cef973c039446fe5fc179c20878330d766e9b944124c71c0f83697393725e6f62fc13666652fb2372624bbb2cf136012fcd58859a3abec26a773a54027d572f788b1e4201c0b7792590cb47407f60a60f81ede6483a63439658e357db949caec0f5e9af8df6192114ebd884055c7751bd1362f1939df08126d1c8ae36f7f766cc1a6693ee6a9411835858"}, 0xb8) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0x4, 0xffffff7f}, @TCA_FQ_PIE_ALPHA={0x8}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x44, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x0, 0x10, 0x0, 0xfe, 0x2, 0xfe, 0x5, 0x300}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf7}, @RTA_VIA={0x14, 0x12, {0x2a, "3c49847cdbd02b60c640f669f9ad"}}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x13, 0x3, r4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) 19:55:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xffffffff, 0x1, 0x7, 0x949, 0x3}) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x20, 0x6, 0x3, 0xff}}, @l2cap_conf_req={{0x4, 0x2, 0x5c}, {0xfb, 0x40, [@l2cap_conf_mtu={0x1, 0x2, 0xff}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x86fa, 0x3f080, 0x7, 0x200}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0xc2, 0x3, 0xaa4d, 0x4}}, @l2cap_conf_flushto={0x2, 0x2, 0xea4}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x5, 0x0, 0x7, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0xc7e}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x9, 0x40, 0x400}}, @l2cap_conf_mtu={0x1, 0x2, 0x22}, @l2cap_conf_flushto={0x2, 0x2, 0xff}]}}, @l2cap_create_chan_rsp={{0xd, 0xfd, 0x8}, {0x400, 0x4, 0x1, 0x2}}]}}, 0x81) 19:55:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 421.430472][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 421.438983][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xffffffff, 0x1, 0x7, 0x949, 0x3}) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x20, 0x6, 0x3, 0xff}}, @l2cap_conf_req={{0x4, 0x2, 0x5c}, {0xfb, 0x40, [@l2cap_conf_mtu={0x1, 0x2, 0xff}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x86fa, 0x3f080, 0x7, 0x200}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0xc2, 0x3, 0xaa4d, 0x4}}, @l2cap_conf_flushto={0x2, 0x2, 0xea4}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x5, 0x0, 0x7, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0xc7e}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x9, 0x40, 0x400}}, @l2cap_conf_mtu={0x1, 0x2, 0x22}, @l2cap_conf_flushto={0x2, 0x2, 0xff}]}}, @l2cap_create_chan_rsp={{0xd, 0xfd, 0x8}, {0x400, 0x4, 0x1, 0x2}}]}}, 0x81) 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040), 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="028bff", @ANYRES16, @ANYBLOB="3d297e4e8c5832e88bdec24cfd232d28e25f0024099d9766882e12a1e9b19ebd1ffe4150b90e3fb9bd3fb1a0ec5f04c120cc6235b133c0a6b7df8fd7788b62bac69b92644ba9099f91b34a0521a215e56f40d507b7dd73d1f1f314d1997c04be8483e0652c4a03b9ec0ee471f6"], 0xdf) 19:55:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 421.478531][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 421.489465][ T5127] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 421.498367][ T5127] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) 19:55:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = socket(0x28, 0x5, 0x0) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x101, 0x8, 0x5, 0x7, 0x81}) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r3) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) kcmp(0x0, r6, 0x1, r0, r0) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x18480) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000327bd7800fddbdf330a0000000cc6000200000000000e091c0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES16=r1], 0x11) (async) sched_setscheduler(r6, 0x1, &(0x7f0000000140)=0x2) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043c07ffffffffff7502"], 0xa) 19:55:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC], 0x102) 19:55:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async, rerun: 32) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xffffffff, 0x1, 0x7, 0x949, 0x3}) (rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x7c}, @l2cap_cid_signaling={{0x78}, [@l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x20, 0x6, 0x3, 0xff}}, @l2cap_conf_req={{0x4, 0x2, 0x5c}, {0xfb, 0x40, [@l2cap_conf_mtu={0x1, 0x2, 0xff}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x86fa, 0x3f080, 0x7, 0x200}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0xc2, 0x3, 0xaa4d, 0x4}}, @l2cap_conf_flushto={0x2, 0x2, 0xea4}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x5, 0x0, 0x7, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0xc7e}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x9, 0x40, 0x400}}, @l2cap_conf_mtu={0x1, 0x2, 0x22}, @l2cap_conf_flushto={0x2, 0x2, 0xff}]}}, @l2cap_create_chan_rsp={{0xd, 0xfd, 0x8}, {0x400, 0x4, 0x1, 0x2}}]}}, 0x81) 19:55:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="028bff", @ANYRES16, @ANYBLOB="3d297e4e8c5832e88bdec24cfd232d28e25f0024099d9766882e12a1e9b19ebd1ffe4150b90e3fb9bd3fb1a0ec5f04c120cc6235b133c0a6b7df8fd7788b62bac69b92644ba9099f91b34a0521a215e56f40d507b7dd73d1f1f314d1997c04be8483e0652c4a03b9ec0ee471f6"], 0xdf) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="028bff", @ANYRES16, @ANYBLOB="3d297e4e8c5832e88bdec24cfd232d28e25f0024099d9766882e12a1e9b19ebd1ffe4150b90e3fb9bd3fb1a0ec5f04c120cc6235b133c0a6b7df8fd7788b62bac69b92644ba9099f91b34a0521a215e56f40d507b7dd73d1f1f314d1997c04be8483e0652c4a03b9ec0ee471f6"], 0xdf) (async) [ 421.578381][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 3979 [ 421.586275][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040), 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC], 0x102) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC], 0x102) (async) 19:55:20 executing program 1: syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x6c}, @l2cap_cid_signaling={{0x68}, [@l2cap_conn_req={{0x2, 0x0, 0x4}, {0x7, 0x25}}, @l2cap_disconn_rsp={{0x7, 0x2f, 0x4}, {0x6, 0x7ff}}, @l2cap_conf_req={{0x4, 0x4, 0x8}, {0x401, 0x1f, [@l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x7fff}}, @l2cap_conf_req={{0x4, 0x4, 0x24}, {0x81, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0xe21d, 0x3ff, 0x9, 0x20}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x40, 0x1, 0x3, 0x9, 0x2}}]}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0xffff}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x40, 0x56}}, @l2cap_conf_req={{0x4, 0x6b, 0xc}, {0x0, 0x9, [@l2cap_conf_ews={0x7, 0x2, 0x74}, @l2cap_conf_mtu={0x1, 0x2, 0x545}]}}]}}, 0x71) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7a}, "9f7ee9e5766f15930bb90a66df09554e383a89a1283921328293df36ee973f042a50bb1a260fcee1900859651c7e3f2370b5d43664b8256c68b529c557aa15803f64a518274b7926dcd2298f8ab337e6f24d1d62047858a10429741ae2aa7552862d25793f0179d8bdf677dd9c8ec152aada377d6b86598b1054"}, 0x7e) 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3ab0200000000000000ad940a87c5200c0cb1c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c235198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae050b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f23aba21c5f906bc20078661ca8459ee4a2aaa04cb8aef0a1ef635aeeeeeba2b083b2abbcdd8a2264ee7d6fe5e2bd26d8a843b06e9a2ef637837ff22d336b155329fd1dfd476aa7997968b9163758283c9376013d90977d65d992db95330616457162b51988c49bc11d18bd393bf1a2976de2681218e27dec59476cdca6ba5274f6c6da4b686c54bb47d5b1dac111694dc5dde5933811249491f14cd0a59ed91ca172378ec8b5d0f12b6f79164e59e3f4cd66d28d8ced6c134b5e8ae4a7a52aebdc8b6140fd300abdc990b6e691872c6de1d29b1bd7026a123b117587570be40b99d82bd4630fcec20dd3f382dabe2"], 0x102) 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040), 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 4: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x880, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) [ 421.661756][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e78", 0xa) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 421.746845][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 3979 [ 421.755720][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 3979 [ 421.782495][ T5118] Bluetooth: hci5: ACL packet for unknown connection handle 200 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e78", 0xa) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 4: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x880, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) 19:55:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="028bff", @ANYRES16, @ANYBLOB="3d297e4e8c5832e88bdec24cfd232d28e25f0024099d9766882e12a1e9b19ebd1ffe4150b90e3fb9bd3fb1a0ec5f04c120cc6235b133c0a6b7df8fd7788b62bac69b92644ba9099f91b34a0521a215e56f40d507b7dd73d1f1f314d1997c04be8483e0652c4a03b9ec0ee471f6"], 0xdf) 19:55:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC], 0x102) 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e78", 0xa) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 421.790255][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 421.798894][ T5130] bt_err_ratelimited: 107 callbacks suppressed 19:55:20 executing program 1: syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x6c}, @l2cap_cid_signaling={{0x68}, [@l2cap_conn_req={{0x2, 0x0, 0x4}, {0x7, 0x25}}, @l2cap_disconn_rsp={{0x7, 0x2f, 0x4}, {0x6, 0x7ff}}, @l2cap_conf_req={{0x4, 0x4, 0x8}, {0x401, 0x1f, [@l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x7fff}}, @l2cap_conf_req={{0x4, 0x4, 0x24}, {0x81, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0xe21d, 0x3ff, 0x9, 0x20}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x40, 0x1, 0x3, 0x9, 0x2}}]}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0xffff}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x40, 0x56}}, @l2cap_conf_req={{0x4, 0x6b, 0xc}, {0x0, 0x9, [@l2cap_conf_ews={0x7, 0x2, 0x74}, @l2cap_conf_mtu={0x1, 0x2, 0x545}]}}]}}, 0x71) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7a}, "9f7ee9e5766f15930bb90a66df09554e383a89a1283921328293df36ee973f042a50bb1a260fcee1900859651c7e3f2370b5d43664b8256c68b529c557aa15803f64a518274b7926dcd2298f8ab337e6f24d1d62047858a10429741ae2aa7552862d25793f0179d8bdf677dd9c8ec152aada377d6b86598b1054"}, 0x7e) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x6c}, @l2cap_cid_signaling={{0x68}, [@l2cap_conn_req={{0x2, 0x0, 0x4}, {0x7, 0x25}}, @l2cap_disconn_rsp={{0x7, 0x2f, 0x4}, {0x6, 0x7ff}}, @l2cap_conf_req={{0x4, 0x4, 0x8}, {0x401, 0x1f, [@l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x7fff}}, @l2cap_conf_req={{0x4, 0x4, 0x24}, {0x81, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0xe21d, 0x3ff, 0x9, 0x20}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x40, 0x1, 0x3, 0x9, 0x2}}]}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0xffff}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x40, 0x56}}, @l2cap_conf_req={{0x4, 0x6b, 0xc}, {0x0, 0x9, [@l2cap_conf_ews={0x7, 0x2, 0x74}, @l2cap_conf_mtu={0x1, 0x2, 0x545}]}}]}}, 0x71) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7a}, "9f7ee9e5766f15930bb90a66df09554e383a89a1283921328293df36ee973f042a50bb1a260fcee1900859651c7e3f2370b5d43664b8256c68b529c557aa15803f64a518274b7926dcd2298f8ab337e6f24d1d62047858a10429741ae2aa7552862d25793f0179d8bdf677dd9c8ec152aada377d6b86598b1054"}, 0x7e) (async) 19:55:20 executing program 4: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x880, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}}}}, 0x11) 19:55:20 executing program 0: r0 = socket(0x26, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="8f241ca7d3c9032160f89edad88a601314280821b5da3e30026fd4bd50988cc3"], 0xdf) 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) getpid() [ 421.798905][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 421.873703][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 421.890447][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 421.903321][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 3979 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) getpid() 19:55:20 executing program 0: r0 = socket(0x26, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="8f241ca7d3c9032160f89edad88a601314280821b5da3e30026fd4bd50988cc3"], 0xdf) 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d", 0xf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x977c}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r3], 0x59) write(r2, &(0x7f00000001c0)="5ff709b5ecc897acb7a559dcb083e1cdbb3238744c9f7cb80e9ef49c1d", 0x1d) [ 421.970932][ T5130] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 421.976221][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 421.994336][ T5118] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 421.994709][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) getpid() (async) getpid() 19:55:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="487f6bfab2fcc794f51aa01dd424c28eaeabea24418c2274cdaf06d59cb8b60aeee51ce2f10986a945a5948e9c0a7cc21a073f9b2dad9d202ea10440361c47a472c8a5a29e3bdf6b478f6892d2120e12c262", 0x52}, {&(0x7f0000000380)="0d5ed7f0f36a1904efac87728c660ed2596be7153c6522ce0d94da545a302e8d767b30e351f15fd4407cdac0fa27b3869f868e1392738d15ed8bcc0e02f5b33becf14802a0a03fe8503bdcff6696bbb85002a37a0037e5e70b7c8601c663193356ab6960ff0e61857954519ce45e0c953fe8e0c51a818c2fa3f59fe086266d0daa3b7d77e07fda78279d242ffeb8eeea95ca", 0x92}], 0x2, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}], 0x1, 0x800) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9e}, "f923817fd6c2b2bd912fa1e8be5fcdfe6401e52bab27ca423a4b2c7fe133425b216564c77451318d7fc1a80370bdba7b4d159fa5c5d2493f8e3065b2fc7f230c758270de73f3bdda638b48a19a7c99e7adb3f735628346ea6ee8a80c2a3f7f4a8d3a0683c9b893fe2f2f5f18a00b96810ea216547f258f47a41f9b35c90001f4d6d94e06fd09d72760e11b4dcb0e908ed93d773e07e1d89930b82ad7e44a"}, 0xa2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x1a}, {0x9, 0x800, 0x9, 0x23f, [0xff, 0x0, 0x73c, 0x8, 0x3, 0x6, 0x20, 0x5, 0x101]}}}}, 0x27) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:20 executing program 0: r0 = socket(0x26, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="8f241ca7d3c9032160f89edad88a601314280821b5da3e30026fd4bd50988cc3"], 0xdf) 19:55:20 executing program 1: syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x6c}, @l2cap_cid_signaling={{0x68}, [@l2cap_conn_req={{0x2, 0x0, 0x4}, {0x7, 0x25}}, @l2cap_disconn_rsp={{0x7, 0x2f, 0x4}, {0x6, 0x7ff}}, @l2cap_conf_req={{0x4, 0x4, 0x8}, {0x401, 0x1f, [@l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x7fff}}, @l2cap_conf_req={{0x4, 0x4, 0x24}, {0x81, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0xe21d, 0x3ff, 0x9, 0x20}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x40, 0x1, 0x3, 0x9, 0x2}}]}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0xffff}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x40, 0x56}}, @l2cap_conf_req={{0x4, 0x6b, 0xc}, {0x0, 0x9, [@l2cap_conf_ews={0x7, 0x2, 0x74}, @l2cap_conf_mtu={0x1, 0x2, 0x545}]}}]}}, 0x71) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7a}, "9f7ee9e5766f15930bb90a66df09554e383a89a1283921328293df36ee973f042a50bb1a260fcee1900859651c7e3f2370b5d43664b8256c68b529c557aa15803f64a518274b7926dcd2298f8ab337e6f24d1d62047858a10429741ae2aa7552862d25793f0179d8bdf677dd9c8ec152aada377d6b86598b1054"}, 0x7e) 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d", 0xf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x1}}}, 0x8) 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d", 0xf) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x33}, {0x70, 0x8, [{0xc8, 0x6}, {0xc8, 0x800, 0x9}, {0xc8, 0x8, 0x6}, {0xc8, 0x3f, 0x4}, {0xc9, 0x5, 0x81}, {0xc9, 0x4, 0x27d}, {0xc8, 0x1, 0x4}, {0xc9, 0x8001, 0x8000}]}}}, 0x36) 19:55:20 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) socket$packet(0x11, 0x5, 0x300) 19:55:20 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="487f6bfab2fcc794f51aa01dd424c28eaeabea24418c2274cdaf06d59cb8b60aeee51ce2f10986a945a5948e9c0a7cc21a073f9b2dad9d202ea10440361c47a472c8a5a29e3bdf6b478f6892d2120e12c262", 0x52}, {&(0x7f0000000380)="0d5ed7f0f36a1904efac87728c660ed2596be7153c6522ce0d94da545a302e8d767b30e351f15fd4407cdac0fa27b3869f868e1392738d15ed8bcc0e02f5b33becf14802a0a03fe8503bdcff6696bbb85002a37a0037e5e70b7c8601c663193356ab6960ff0e61857954519ce45e0c953fe8e0c51a818c2fa3f59fe086266d0daa3b7d77e07fda78279d242ffeb8eeea95ca", 0x92}], 0x2, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}], 0x1, 0x800) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9e}, "f923817fd6c2b2bd912fa1e8be5fcdfe6401e52bab27ca423a4b2c7fe133425b216564c77451318d7fc1a80370bdba7b4d159fa5c5d2493f8e3065b2fc7f230c758270de73f3bdda638b48a19a7c99e7adb3f735628346ea6ee8a80c2a3f7f4a8d3a0683c9b893fe2f2f5f18a00b96810ea216547f258f47a41f9b35c90001f4d6d94e06fd09d72760e11b4dcb0e908ed93d773e07e1d89930b82ad7e44a"}, 0xa2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x1a}, {0x9, 0x800, 0x9, 0x23f, [0xff, 0x0, 0x73c, 0x8, 0x3, 0x6, 0x20, 0x5, 0x101]}}}}, 0x27) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 422.011186][ T5118] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 422.149774][ T5118] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 422.156102][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 422.157655][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x1}}}, 0x8) 19:55:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x78, 0x2d, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {0x4, 0x7}, {0xffe0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_RATE={0x6, 0x5, {0xd8, 0xea}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xa9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) 19:55:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x1}}}, 0x8) 19:55:20 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x33}, {0x70, 0x8, [{0xc8, 0x6}, {0xc8, 0x800, 0x9}, {0xc8, 0x8, 0x6}, {0xc8, 0x3f, 0x4}, {0xc9, 0x5, 0x81}, {0xc9, 0x4, 0x27d}, {0xc8, 0x1, 0x4}, {0xc9, 0x8001, 0x8000}]}}}, 0x36) 19:55:20 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x2b}, @l2cap_cid_signaling={{0x27}, [@l2cap_info_req={{0xa, 0x6, 0x2}, {0x4}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x7, 0x4, 0x2e6a}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x3f, 0x1ff, 0x6}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x7}}]}}, 0x30) [ 422.165227][ T5130] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 422.274396][ T5130] bt_warn_ratelimited: 60 callbacks suppressed [ 422.274411][ T5130] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 [ 422.285716][ T5118] Bluetooth: hci0: unexpected event 0x48 length: 51 > 3 [ 422.297639][ T5118] Bluetooth: hci0: wrong event for mode 0 19:55:21 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="487f6bfab2fcc794f51aa01dd424c28eaeabea24418c2274cdaf06d59cb8b60aeee51ce2f10986a945a5948e9c0a7cc21a073f9b2dad9d202ea10440361c47a472c8a5a29e3bdf6b478f6892d2120e12c262", 0x52}, {&(0x7f0000000380)="0d5ed7f0f36a1904efac87728c660ed2596be7153c6522ce0d94da545a302e8d767b30e351f15fd4407cdac0fa27b3869f868e1392738d15ed8bcc0e02f5b33becf14802a0a03fe8503bdcff6696bbb85002a37a0037e5e70b7c8601c663193356ab6960ff0e61857954519ce45e0c953fe8e0c51a818c2fa3f59fe086266d0daa3b7d77e07fda78279d242ffeb8eeea95ca", 0x92}], 0x2, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}], 0x1, 0x800) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9e}, "f923817fd6c2b2bd912fa1e8be5fcdfe6401e52bab27ca423a4b2c7fe133425b216564c77451318d7fc1a80370bdba7b4d159fa5c5d2493f8e3065b2fc7f230c758270de73f3bdda638b48a19a7c99e7adb3f735628346ea6ee8a80c2a3f7f4a8d3a0683c9b893fe2f2f5f18a00b96810ea216547f258f47a41f9b35c90001f4d6d94e06fd09d72760e11b4dcb0e908ed93d773e07e1d89930b82ad7e44a"}, 0xa2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x1a}, {0x9, 0x800, 0x9, 0x23f, [0xff, 0x0, 0x73c, 0x8, 0x3, 0x6, 0x20, 0x5, 0x101]}}}}, 0x27) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:21 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x2b}, @l2cap_cid_signaling={{0x27}, [@l2cap_info_req={{0xa, 0x6, 0x2}, {0x4}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x7, 0x4, 0x2e6a}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x3f, 0x1ff, 0x6}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x7}}]}}, 0x30) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) socket$packet(0x11, 0x5, 0x300) 19:55:21 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x2b}, @l2cap_cid_signaling={{0x27}, [@l2cap_info_req={{0xa, 0x6, 0x2}, {0x4}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x7, 0x4, 0x2e6a}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x3f, 0x1ff, 0x6}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x7}}]}}, 0x30) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x2b}, @l2cap_cid_signaling={{0x27}, [@l2cap_info_req={{0xa, 0x6, 0x2}, {0x4}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x7, 0x4, 0x2e6a}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x3f, 0x1ff, 0x6}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x7}}]}}, 0x30) (async) 19:55:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x78, 0x2d, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {0x4, 0x7}, {0xffe0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_RATE={0x6, 0x5, {0xd8, 0xea}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xa9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) [ 422.302537][ T5130] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 422.445075][ T5130] Bluetooth: hci0: unexpected event 0x48 length: 51 > 3 [ 422.454266][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 422.456198][ T5118] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 422.472487][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 422.487521][ T5130] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 19:55:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x78, 0x2d, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {0x4, 0x7}, {0xffe0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_RATE={0x6, 0x5, {0xd8, 0xea}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xa9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) 19:55:21 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x33}, {0x70, 0x8, [{0xc8, 0x6}, {0xc8, 0x800, 0x9}, {0xc8, 0x8, 0x6}, {0xc8, 0x3f, 0x4}, {0xc9, 0x5, 0x81}, {0xc9, 0x4, 0x27d}, {0xc8, 0x1, 0x4}, {0xc9, 0x8001, 0x8000}]}}}, 0x36) [ 422.487998][ T5118] Bluetooth: hci2: command 0x0409 tx timeout 19:55:21 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xffffffa7) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) socket$packet(0x11, 0x5, 0x300) 19:55:21 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb8}, "66cc3cb33d570d247385721de1f66580d0cb6bf7484e218ae2537ede13d53e4731a84d1b3bd15d5c6f82507901f57ea93967b26174aaa22b3e8ca7d0e9a57cb4519d48c1c11f993f7dd9242d646636b83a69c3e1ec48316231b82c30a5e44068d4dc9986d0b5849f94b9ea48161edbc51a7dd6964a56fd2be115dc9839eb8c1778a1af1d92d7cb7276a0254b32121d9bb81556344705ee4f1efac62d715716b4c639121dc35412cccd7d9a9b8dcf687e73e255f1ff5f7a88"}}, 0xbb) 19:55:21 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x9}}, 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x64, 0xf6}, "9c08c6f947e5f66bb1310e1a292864defd0d625240d5009d7c6a6b2e766deac4a01c1520ea1c3e149a18ade2a03cecc88217ce43b306068b2dce737d7e2328e4cf1e0aca2e276e7ec89cdfe6d9626a5bbf19917e9f68d14f76e42d0ad78e7073db8b55d68d947fdb46686c0af93ace02f47e4564f8f27c28c02ccaa1ab72096ec165c49fcafa7c881a03519b19a23929321cf8e6cf1113eff15e2b47f2dec45929e5034b79dac53559465dfe28cc5de8f2cb42fcdccd08fbe94c6955c13f60ddfa4d164b592e4ce89676413e57fe702ab783a78c8679a362f960530f4fbd5b81213727bac17f584b6b574d5f3676f1b1663bb9e3dd01"}, 0xfa) 19:55:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 422.567614][ T5118] Bluetooth: hci4: command 0x0409 tx timeout 19:55:21 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x9}}, 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x64, 0xf6}, "9c08c6f947e5f66bb1310e1a292864defd0d625240d5009d7c6a6b2e766deac4a01c1520ea1c3e149a18ade2a03cecc88217ce43b306068b2dce737d7e2328e4cf1e0aca2e276e7ec89cdfe6d9626a5bbf19917e9f68d14f76e42d0ad78e7073db8b55d68d947fdb46686c0af93ace02f47e4564f8f27c28c02ccaa1ab72096ec165c49fcafa7c881a03519b19a23929321cf8e6cf1113eff15e2b47f2dec45929e5034b79dac53559465dfe28cc5de8f2cb42fcdccd08fbe94c6955c13f60ddfa4d164b592e4ce89676413e57fe702ab783a78c8679a362f960530f4fbd5b81213727bac17f584b6b574d5f3676f1b1663bb9e3dd01"}, 0xfa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x9}}, 0x4) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x64, 0xf6}, "9c08c6f947e5f66bb1310e1a292864defd0d625240d5009d7c6a6b2e766deac4a01c1520ea1c3e149a18ade2a03cecc88217ce43b306068b2dce737d7e2328e4cf1e0aca2e276e7ec89cdfe6d9626a5bbf19917e9f68d14f76e42d0ad78e7073db8b55d68d947fdb46686c0af93ace02f47e4564f8f27c28c02ccaa1ab72096ec165c49fcafa7c881a03519b19a23929321cf8e6cf1113eff15e2b47f2dec45929e5034b79dac53559465dfe28cc5de8f2cb42fcdccd08fbe94c6955c13f60ddfa4d164b592e4ce89676413e57fe702ab783a78c8679a362f960530f4fbd5b81213727bac17f584b6b574d5f3676f1b1663bb9e3dd01"}, 0xfa) (async) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) 19:55:21 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb8}, "66cc3cb33d570d247385721de1f66580d0cb6bf7484e218ae2537ede13d53e4731a84d1b3bd15d5c6f82507901f57ea93967b26174aaa22b3e8ca7d0e9a57cb4519d48c1c11f993f7dd9242d646636b83a69c3e1ec48316231b82c30a5e44068d4dc9986d0b5849f94b9ea48161edbc51a7dd6964a56fd2be115dc9839eb8c1778a1af1d92d7cb7276a0254b32121d9bb81556344705ee4f1efac62d715716b4c639121dc35412cccd7d9a9b8dcf687e73e255f1ff5f7a88"}}, 0xbb) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb8}, "66cc3cb33d570d247385721de1f66580d0cb6bf7484e218ae2537ede13d53e4731a84d1b3bd15d5c6f82507901f57ea93967b26174aaa22b3e8ca7d0e9a57cb4519d48c1c11f993f7dd9242d646636b83a69c3e1ec48316231b82c30a5e44068d4dc9986d0b5849f94b9ea48161edbc51a7dd6964a56fd2be115dc9839eb8c1778a1af1d92d7cb7276a0254b32121d9bb81556344705ee4f1efac62d715716b4c639121dc35412cccd7d9a9b8dcf687e73e255f1ff5f7a88"}}, 0xbb) (async) 19:55:21 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xffffffa7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xffffffa7) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) 19:55:21 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1c}, "bfb2daa9e7217b88e2b21cd1ee47c7545018bb075a213a3935487cd6"}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 422.621760][ T5118] Bluetooth: hci3: SCO packet for unknown connection handle 100 [ 422.640995][ T5118] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 [ 422.657422][ T5118] Bluetooth: hci0: unexpected event 0x48 length: 51 > 3 [ 422.664475][ T5118] Bluetooth: hci0: wrong event for mode 0 19:55:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) [ 422.705196][ T5118] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 [ 422.741481][ T5118] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 19:55:21 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb8}, "66cc3cb33d570d247385721de1f66580d0cb6bf7484e218ae2537ede13d53e4731a84d1b3bd15d5c6f82507901f57ea93967b26174aaa22b3e8ca7d0e9a57cb4519d48c1c11f993f7dd9242d646636b83a69c3e1ec48316231b82c30a5e44068d4dc9986d0b5849f94b9ea48161edbc51a7dd6964a56fd2be115dc9839eb8c1778a1af1d92d7cb7276a0254b32121d9bb81556344705ee4f1efac62d715716b4c639121dc35412cccd7d9a9b8dcf687e73e255f1ff5f7a88"}}, 0xbb) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) [ 422.778084][ T5118] Bluetooth: hci3: SCO packet for unknown connection handle 100 19:55:21 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x9}}, 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x64, 0xf6}, "9c08c6f947e5f66bb1310e1a292864defd0d625240d5009d7c6a6b2e766deac4a01c1520ea1c3e149a18ade2a03cecc88217ce43b306068b2dce737d7e2328e4cf1e0aca2e276e7ec89cdfe6d9626a5bbf19917e9f68d14f76e42d0ad78e7073db8b55d68d947fdb46686c0af93ace02f47e4564f8f27c28c02ccaa1ab72096ec165c49fcafa7c881a03519b19a23929321cf8e6cf1113eff15e2b47f2dec45929e5034b79dac53559465dfe28cc5de8f2cb42fcdccd08fbe94c6955c13f60ddfa4d164b592e4ce89676413e57fe702ab783a78c8679a362f960530f4fbd5b81213727bac17f584b6b574d5f3676f1b1663bb9e3dd01"}, 0xfa) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x9}}, 0x4) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x64, 0xf6}, "9c08c6f947e5f66bb1310e1a292864defd0d625240d5009d7c6a6b2e766deac4a01c1520ea1c3e149a18ade2a03cecc88217ce43b306068b2dce737d7e2328e4cf1e0aca2e276e7ec89cdfe6d9626a5bbf19917e9f68d14f76e42d0ad78e7073db8b55d68d947fdb46686c0af93ace02f47e4564f8f27c28c02ccaa1ab72096ec165c49fcafa7c881a03519b19a23929321cf8e6cf1113eff15e2b47f2dec45929e5034b79dac53559465dfe28cc5de8f2cb42fcdccd08fbe94c6955c13f60ddfa4d164b592e4ce89676413e57fe702ab783a78c8679a362f960530f4fbd5b81213727bac17f584b6b574d5f3676f1b1663bb9e3dd01"}, 0xfa) (async) 19:55:21 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xffffffa7) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x2}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:21 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1c}, "bfb2daa9e7217b88e2b21cd1ee47c7545018bb075a213a3935487cd6"}, 0x20) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 19:55:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149", 0x13) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="01ceffffffffffff"], 0xdf) 19:55:21 executing program 2: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000080)=""/68, 0x44}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="951db802c8a00d00090001000cff05bb31258313f166000900"], 0x12) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="01ceffffffffffff"], 0xdf) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) 19:55:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a86d3499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0e5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21d2f906bc20078661cabfe12a7c26dffc2f068f163f688ccb435894cfa7e07e1fa7e0c30027d2a89fbc367410e398e1afd0b0f7072cc39440ba5f7e498dd0249802fa472fa8f81cc4540989c5841d5c696e"], 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x44}, @l2cap_cid_signaling={{0x40}, [@l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x8}}, @l2cap_conf_req={{0x4, 0x5, 0xb}, {0x1000, 0xdd, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x2}]}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0xdc, 0x4}, {0x800, 0x81}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x859}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x0, 0x9, 0x3f, 0x8}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x9, 0x1ff}}]}}, 0x49) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x5, 0xa}, {0x0, 0xffff, 0x0, 0x9, 0x1568}}}}, 0x17) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 19:55:21 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1c}, "bfb2daa9e7217b88e2b21cd1ee47c7545018bb075a213a3935487cd6"}, 0x20) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 19:55:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149", 0x13) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:21 executing program 2: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000080)=""/68, 0x44}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="951db802c8a00d00090001000cff05bb31258313f166000900"], 0x12) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000080)=""/68, 0x44}) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="951db802c8a00d00090001000cff05bb31258313f166000900"], 0x12) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) 19:55:21 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="01ceffffffffffff"], 0xdf) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64=r3], 0x6f) 19:55:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x44}, @l2cap_cid_signaling={{0x40}, [@l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x8}}, @l2cap_conf_req={{0x4, 0x5, 0xb}, {0x1000, 0xdd, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x2}]}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0xdc, 0x4}, {0x800, 0x81}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x859}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x0, 0x9, 0x3f, 0x8}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x9, 0x1ff}}]}}, 0x49) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x5, 0xa}, {0x0, 0xffff, 0x0, 0x9, 0x1568}}}}, 0x17) (async, rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (rerun: 32) [ 422.785357][ T5118] Bluetooth: hci3: SCO packet for unknown connection handle 100 [ 423.036770][ T5118] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 [ 423.043292][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.070189][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:21 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149", 0x13) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xcec774a3c4e02e17, 0x35}, "e05c7e7be82dacfa51a7d0580a54ea243bedd87ffb725047c931757fce0fc4463f125367f71383c576baff619affcfd33390673e0b"}, 0x39) [ 423.123063][ T5130] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 [ 423.126340][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.144102][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.151840][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.160161][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.167937][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:21 executing program 2: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000080)=""/68, 0x44}) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="951db802c8a00d00090001000cff05bb31258313f166000900"], 0x12) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 19:55:21 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64], 0x6f) 19:55:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x406000, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f00000001c0)={0x2b0c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x21f6e96e, 0x14}}}}, [@NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xfff, 0xdb, 0x8, 0x44c2, 0xf08a]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0xee, 0x2, 0x5]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x245}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x2154, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x4bf, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_a, @from_mac=@device_b, {0x1, 0x7f}}, 0x2, @random=0x4, 0x0, @void, @val={0x1, 0x5, [{0x48}, {0x1b, 0x1}, {0xb, 0x1}, {0x60, 0x1}, {0x24}]}, @void, @void, @void, @val={0x5, 0xd2, {0x5, 0x30, 0x0, "3da3fa7b4ba10b34e1c332be37b04fdf2d5edeb1b315d910df66815f02257ac0fc036178f7bc27236bb94e6979db77beb799475535daf48918d01e0aef18a065389242c10052456a9add1cbf0b7855a6e654d0fc137c1e2acff60961fc5fd3b8b7964e7c912d8c3944285ab6c524e8b3b5c27db8217fcb6029cfaafc4a5f8ed37b73b808a753fbe7b79956a00338ccf680ce04242d0d0f2152384d4b7254d16f8746e40b82ee1d154552d3975415cf249e6060b00b6b9dd9d0e47de28ee578a1cc37f0953f128fa7d1bfe707176d42"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x2, 0x8c, 0x7}}, @val={0x2d, 0x1a, {0xc, 0x2, 0x7, 0x0, {0x3, 0x1f1c, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x402, 0x36c, 0x3}}, @void, @void, @void, [{0xdd, 0xcf, "66a231d5262f64708936cef7ebff34436fcd203bb32efd796afd035f355f9ce176de106d11c09202d01c3fb53458ea45fa8ee13727359a2adce4a84357a88d222643dd6817e579b31c8000c9bebe3a598f598bc8bbda93e1fa9c0403dd0a1da90d63a5a4d0aad300c145ce604014a98ea45f9063f49896cc1d1046500493ad11d1a4b45d41f82e7dbba987210cc35fadeb08c9d270f3be2f7488ea80040117c0c1ef3eae57ac92daf957bdcf729b7f600664c8528cf1695cb825da08dc3e346626c2ebcf44eeab76abab209192868e"}, {0xdd, 0x7, "9445cf7056cbe9"}, {0xdd, 0x4a, "bd2c307794580c2c8c1dc8ad1894bb985230362d3cd6a47dec6ece90849b2d27e30b5cc87134ecd9c4139125a0a9d16f33f991ab4adee0d4d0a27a067bbe18922aa936e4934efb7f1a65"}, {0xdd, 0xbd, "7adc69e09562c25c37db13ce8ab74f29f487f9039dd1c6bdb9467a7e7c6b741f65fc79626298a6c28c7c6fabd9e6ccf9871adee57ec9b2af363fdf98b7ed10ff246cfa0d3e077d7cc61b3bf24d3b008dfa8af6bbf7dacd77571553e1acb916977d3a16fb00dd0c9fa52027154aa08179a3602178acc7987ae28998d69421cc3e95da23cd4f736c9130778492622f80f70f9d10a30aef95302b0228b33dfdd5f991f5be85bfcc1adfc88e22c0da2dbe06527de079999dfbfb8a13438e0d"}, {0xdd, 0x13, "b4e215171cd198660185c9a67f2bae8a57f9d8"}, {0xdd, 0xab, "81189fa1e81012e4aaad6813db45dfd1d22f85c9e53803d9f60fe384545d871b5e82b2d71c82f8669ac6a59dd64b0dd2ba0eab6012e17a4f51c108569978bd78eb102740966aabe91d6e7ff72e2cc355888eb041e87a55112b4dda266837917bff49f361a29e0f496f02c87f05dd1ac23880d072f20e9631570d0384a15aaa207d5b8d332dfc854f0c1cccafbf4ea53cd55c598f3d887cd796fa3fc191bf8922034f7c0e380c8ffebd0279"}, {0xdd, 0xf1, "b20657f105ab447269761b684299b82debf881d037d5482f6563f1c6c670de244d9994f5c18ef7c04a091be640e2f95133d09ebf9326d01bee58e9678e7489a3d8468904c45d83374c3ca0e69b34e6172edc9388a4afdd76385a240648276c74c760c4e6e0f22dda7a6e9ccf8871f01a7a46f8951a540dd4e47a84a1307516daeb40f98f17f7a68cd8c44f17f6f75a027b8566131bd7ed30aa2868e57da1a9c9afeab4c2b4a42c05393b6db89ca7db3a888cc6bd7a8a05fc0b7bb2d41e4a5961c83dc6dd2ac831451815c52d1a5aaaaf14ff55877b4f8c57f0a984d2ea6d6536bc6d7cb437a002b7b4d57901a4c5b35c20"}]}}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x101c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x735, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xe6, 0x80, [@peer_mgmt={0x75, 0x6, {0x0, 0x85b, @void, @val=0x4, @void}}, @random={0x9, 0xb4, "206b03fc4b3220f5c2d1167b7d9aad0604f3f114801cb92aa79b505485667d5b53034ada20bebdd8525f8b6173fb925867a187052b034178e6483d1383e4e37d901a4da09cb2cd53dc0691e24fde1df68fbbcf06361bb554bcc57e82db76a464d9a49e3bd9759cbfbf90ca291bcd816aee488db46f6efe352affc7fcf8aefad216fca87dccb239f7bad4eee3ffee6ba2d73845560e1aa75e96ea8d5ba955de9af10e29b4f907007750315965920366dc56cadc80"}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x1, 0x0, {0x50ccd201, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x200, 0x1}}, @cf={0x4, 0x6, {0xff, 0x3, 0x4}}]}, @NL80211_ATTR_BEACON_TAIL={0xd8, 0xf, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x84, 0x1f}}, @gcr_ga={0xbd, 0x6}, @perr={0x84, 0xaf, {0x8, 0xb, [@ext={{}, @device_a, 0xffffff81, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x7, "", 0x3c}, @ext={{}, @device_a, 0x2, @device_b, 0x37}, @not_ext={{}, @device_b, 0x0, "", 0x3a}, @ext={{}, @broadcast, 0x3, @broadcast, 0x2a}, @not_ext={{}, @broadcast, 0x9, "", 0x16}, @ext={{}, @device_b, 0x5, @device_b, 0x2a}, @not_ext={{}, @device_a, 0x77bc}, @not_ext={{}, @broadcast, 0x480, "", 0x21}, @ext={{}, @broadcast, 0x400, @device_a, 0x31}, @not_ext={{}, @broadcast, 0xea3d, "", 0x17}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x1, 0x7f, 0x20}}, @ibss={0x6, 0x2, 0x80}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0x1, 0x80, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x101, 0x1, 0x0]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x99, 0xf, [@fast_bss_trans={0x37, 0x85, {0x5, 0x3, "f518f5a7ab8f8e75457c128cb7f75188", "0699c50f700cb2f2440ae6155b47b12c6d1dcc54743ca307ee312e75c1f5ee32", "1a6925041d21d8c92faea26ff04ca66eb33f72510c9321c5e4ae1f1cfa8f7e7d", [{0x4, 0x18, "634925d3863b3c4f013b2ddae7b7de3d3573440454b3ef9a"}, {0x1, 0x10, "2cba91dedb165567431e4bcc35c6c4fb"}, {0x2, 0x5, "41d9bbacd5"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x143, 0x7f, [@random={0x8, 0x7c, "107c9c19f6cd8d2e5d7ab0f7dc3046221cd46c80a053554c4655c1257de628cf5f9c915eff8768199164cc63a4ca3126b91d7a0889a6e68521e6b8af2f36b34f0471e331bcd3642314c0ba859521167959b9d85e0ab373fecc467b8a1126c06ece6a55a0836448b79905d8a2433a0fc35c1a4cd61e5f67e63255b13b"}, @chsw_timing={0x68, 0x4, {0x3, 0xfff}}, @chsw_timing={0x68, 0x4, {0x5, 0x9}}, @random_vendor={0xdd, 0x4b, "0f1240fbbf39644beb3f72db1d6d61d9b217011ede1956eb37fec3af722af2de7af308899ffdf8c7844ba785c3be65eda0b1915c8e9d7b5f2259e80232fd4f03fff601623725e4f52abee0"}, @preq={0x82, 0x41, @ext={{0x1, 0x1}, 0xc1, 0x3f, 0xffffffff, @device_a, 0xfff, @broadcast, 0x7fffffff, 0x5, 0x3, [{{0x1}, @device_a, 0x100}, {{0x1, 0x0, 0x1}, @device_b, 0x6}, {{}, @device_b, 0x80000001}]}}, @ht={0x2d, 0x1a, {0x8, 0x3, 0x4, 0x0, {0x7, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x80, 0x20}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x16f, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @initial, {0xb, 0xe45}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb80, @random=0x17, 0x40c0, @void, @void, @val={0x3, 0x1, 0x8c}, @val={0x4, 0x6, {0x6, 0x0, 0x66, 0x51d}}, @val={0x6, 0x2, 0x100}, @val={0x5, 0xc2, {0xe5, 0x5e, 0x7, "012f4281245c549ac0d906bffe625449cdb0c2ce7feeaf3234c23563663d54d9c6745afa02557d13fb565d215de0e86e791e6bb68ff8d6276f5cc6787b535adfad5877cdab631b09c9aab3a4d8ddae2a7a186152bdcc108403967b384950e4501cca1a8f2302fbac37c5f8b822ee7a5c4e6f978103377b80bc221b4b6d788a929f6004ced1c75ed7e977046ec6b06dac2e34ad89e9032d2728a9d557c0128fa1010f746d076d2db403db4a15ceeaaca062e8ae99d120107d610e21d729a277"}}, @val={0x25, 0x3, {0x0, 0x7c, 0x9}}, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x8c, 0x24}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x0, 0x0, {0x4, 0x88, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x2}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf8, 0x3f, 0x6, 0x1}}, [{0xdd, 0x37, "1370ef9e2ca18611b3dfbb2b7996c7b20ef81e1cf1633cd0742bd0619cab8674113b930f3bee894a793b110daf963879f55575fbc63672"}]}}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CSA_IES={0x944, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x7, 0xbc, 0x3, 0x3, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x1, 0xffff, 0x0, 0x8, 0x101, 0x81, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x1000, 0x92b, 0x20]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x104, 0x7f, [@peer_mgmt={0x75, 0x6, {0x0, 0x7f, @void, @val=0x20, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x0, 0x5, @device_b, 0x5, 0xff, 0x1000}}, @random_vendor={0xdd, 0x44, "e5253c79b57b04d65bf08df4a3b653350418801357a1b8cdf780713b30ed9243abbf10cfe048a975a1d06414b4fea5743e678ac3928fd617b356e435af917b9e137ea4ab"}, @channel_switch={0x25, 0x3, {0x0, 0xc9}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0x8, 0x3f}}, @fast_bss_trans={0x37, 0x86, {0xc, 0x2, "6e82a437d7894a24c54a4bce02e70900", "a48f95eca60cbae9f5f22defb4edaa4c36b76265c978f2059be642303113c8b0", "5247168e015815c5f6ca329475942f310b7f08537f989b62f3b960284f4b46af", [{0x4, 0xd, "9f61904e638bf407ad31df3a31"}, {0x4, 0x23, "1b7d7ca721111ca1f148695d6d8a4d23dd41f4aa5fc1e79fd256eacce3bdba0e29aa16"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x1b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7f, 0x3, "380d5dadd379d0a2f4693db8ce7c8597ec0e7f431fdb668db55706d4cc38f54e3110c30489478e5d9c73ca034fe779739427b3a897e762fbdb988503f11bc3b06e18768956826b0fbb3a5d5f4bf9192707c3977f54421a4d491c4f20ee8178d52fcd80cdb24c6073a4a1a16d26d679af86f3c7cf64467721254d53"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x46, 0x3, "7e44e9395efdb5f8d92e10b69df7498a115c22fcf2744db49651fc048f09cbb109e0243e07788abe882c49cf3ede64c4345034150663112bf4729e41aaf4b65f382c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "8a358f3f5cd523941c394ab173e3ff05af910a0bc83824aaa884df0b143e6fe7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb7, 0x3, "59fd20649ff34e1d796624be80bd79ad179362b13343893e977659efa4005fb928b36cda14dceeb4a2c110a189831a7acbf381580d5909d050756188b17bd280c8ff99cc605d47faa68a4374705c1d38b8c7108f962b782f834e7400a84da009d94f446bcbd8fe5e78bed337728346b556eb426a09cceac31bc2e6255ea93f1e84976e32c6b785fdbf1aee1c4f1b212433865cae025da656a1caead67f515881e4c50270a0a15b59e369bbbb80dec634cafd97"}]}, @NL80211_ATTR_IE={0x5c, 0x2a, [@measure_req={0x26, 0x4e, {0x98, 0x80, 0x4, "bdc576f46c65a4dd9137e6914cf5be2c42523b88bb99a3fb89f616546723b4f105549f9b419e300c7e62f869f1325b137ed4ca92482ee9b0765f633c0d415f0316e4f22711d1d2894f7a15"}}, @cf={0x4, 0x6, {0x7b, 0x5, 0x4d, 0x100}}]}, @NL80211_ATTR_PROBE_RESP={0x5f2, 0x91, "af73e06ee75d89ad8f82b76f346638d2ce503a7e03316c5346be7852114b716063c606f42a58f631f75fc34fc2aabb5bd2ae7cc770accdb98223995583f565cd527b915eac420b42483ed505df124cd2a92ae8f1ce7c200a3936159fff705342a1c5e60284200f1ee2b2f37869070fe3615fd5d3c3919fff60d0ec9b7581ea2c523bd420e182131ae7fa4b1cc0a8c1be5580d91d5e563bb018d2bbbeac73b7ff1c488741f86de312cae5c22d8fcad3b52b7a8554bbe13b2c699972369a44130873776416283ebaebf098462d39d7306bd88d303ad39e3d5cf7dc176cc7153b93b3712247c21441d964c6537cc73faeb342a499848c984c33ca3f7024f151eade223a3dc28d5142ec4b412c38d09ec2f5b3bb3c189292060d8c9b96f5df1b64a5b29c04edd70151d0f23a0d96cc786f2fe1213fb30cbdbba8653be802e73803aa00d20d35ef2418a8cd5e124ef844060756d6950b29a0c4634fa248a5555473d58425fd68b9cd15ed6b967d10458ab4c8b3fee21fba4b319fb50d2a23fbb87b108cae00dfac12d60bca38ce4b133354229fd5818977ccc47e23b3e40e38828fe71dffc0f8a1f5c46e76d058b87dc661d44e376aac757ec99215278b18ce5ab4aa347cd2073880e4abcd0af4cb1a03ffcf88513d98e026d593478cdf19bf2aace293a98a12d1e216a3f0df0fdb9ed36ab4b5aef26e05888b3646c96b300dfe253fff3762c5c7dfd3d5ee64e36bade8683f4646ee2ec7e2f0de2dea7238b632972ce7e6164f97665c9955ba85476c3e7ea0b3f3fb0703bcf379e2c40d96e6468e0760f1dcefbe9a7c587516fb196290ccfe8bed3dcb5ba225a860222fac615cedb67b37457d69b24e54e507127c0c8d264225bea4019926215cace4e98f5bb7eb178eb9f20c78b17d29fe795dedcdb7144dbf0876708b79cb582e648e52407801a79d30332ecc820e0dbdf8b8c4208555391205f08e75c200fda48c6f5829d10802993539efcc859dac4409a0f520de3e160a0a4f9598d87f447cb9a5694d0530520a5d721e1af440bd8e92a89fc181e901626cc7e9690d922e75ac9dbb4e56d286fd3cf0eadbe89b551b08f7fafae1b451b9848b1ea7020b3d6e609b7db0c1f0dbb6aa5d176c81cde0767417ab10e69e70ba1720eaeed5c254766d274c5ca8d13211d53bbe1c459558403540d4d594f9d0abf97669870acd4798e63bed6b4d6fef38c8b0ca1c9e8e71ea8c5a004a2451a171b750d70f70c0dbef7cfdf1987033d9de2aac7b02ebf71496b97bb508cbe7cc39ce6cffca3359e364e77b4426d1611420cd3e6694a32299b741b286964780577e333b5dcf91e65eaf059e0e18945ad95e0f6eaa5c8aaf6b94229db5e2dd99bb007c54f43bfe2452ba6f2c9cad9befcac50ae9fca86ee34a7d4b04b99da227cf278ce6e9ebdf73637173a1e12251680701226568de2d7b08ffce641b81b02a21bd68e86568a57ab07da721c554af8ce8cd8c8bc49e8caed847622cb681b090792df4433d3d4215146c568dd7d6bcc9311a4529f2cc0478b3338548c520c75d87e004434046a77cdc22ab664ed2fbd4f8080ebf3d485bdfbcac7b52e8d6d48db53527f777ad0c7dbc5b5cc51133e25039878807e73e6c09169674c3692f1611e6cdda32b038f665d9d8a34f61fc96d247be15bd2b9a478ccff96000ded5f2d0ed025d989908ba4c82bbe6ed13e384fdfb8fc3b0a50f1de5cc65c282aa9b3fd78098021007d07de75c4f7db2f96dcef52874f388cca5b82722cb175cfa53c1e8aed33b7b757574c712ae0b9d45329e49c4ff5bbbb36cfaec305c2937c266778a7a0cf1b1da2bde2b20956f268dec8ab2c456f657b5ea0651bfba1e9d41a492c596f31d22249d1ed02a92edcc7abbb1029bd69f135e327dffa3a715f54e58c0be2c9ee12e92005e33ee5fd140971bf24d5ac4d0ee1e29e2fd97e419a6612f864c8e7d942c663f54984d1d47f903a9c7af4360933f63f97aedf3307308d5f8d1530b50a872f5bc00c08083bdc11f12014823bc08994ef5ce4ea50f197724f5f5667e41347e4536688f24b5344e6c2c45e109b6b228b538972b360f16e7383735256fb2df9ac015d0f9d54863b31a1bcf19b6aa447e13f3c7917d15cb33bac454"}]]}]}, 0x2b0c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xdf) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r3) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 423.175617][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.183361][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.191920][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.199825][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.207536][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.215226][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a86d3499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0e5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21d2f906bc20078661cabfe12a7c26dffc2f068f163f688ccb435894cfa7e07e1fa7e0c30027d2a89fbc367410e398e1afd0b0f7072cc39440ba5f7e498dd0249802fa472fa8f81cc4540989c5841d5c696e"], 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x44}, @l2cap_cid_signaling={{0x40}, [@l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x8}}, @l2cap_conf_req={{0x4, 0x5, 0xb}, {0x1000, 0xdd, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x2}]}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0xdc, 0x4}, {0x800, 0x81}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x859}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x0, 0x9, 0x3f, 0x8}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x9, 0x1ff}}]}}, 0x49) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x5, 0xa}, {0x0, 0xffff, 0x0, 0x9, 0x1568}}}}, 0x17) (async, rerun: 64) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) [ 423.224379][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.232349][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.244704][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.253959][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.261726][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.269443][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.277108][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.284991][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.292819][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.300957][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.308722][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.316394][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:21 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xcec774a3c4e02e17, 0x35}, "e05c7e7be82dacfa51a7d0580a54ea243bedd87ffb725047c931757fce0fc4463f125367f71383c576baff619affcfd33390673e0b"}, 0x39) [ 423.324142][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.331862][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.341232][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.348954][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.356701][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.364568][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x406000, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f00000001c0)={0x2b0c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x21f6e96e, 0x14}}}}, [@NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xfff, 0xdb, 0x8, 0x44c2, 0xf08a]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0xee, 0x2, 0x5]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x245}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x2154, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x4bf, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_a, @from_mac=@device_b, {0x1, 0x7f}}, 0x2, @random=0x4, 0x0, @void, @val={0x1, 0x5, [{0x48}, {0x1b, 0x1}, {0xb, 0x1}, {0x60, 0x1}, {0x24}]}, @void, @void, @void, @val={0x5, 0xd2, {0x5, 0x30, 0x0, "3da3fa7b4ba10b34e1c332be37b04fdf2d5edeb1b315d910df66815f02257ac0fc036178f7bc27236bb94e6979db77beb799475535daf48918d01e0aef18a065389242c10052456a9add1cbf0b7855a6e654d0fc137c1e2acff60961fc5fd3b8b7964e7c912d8c3944285ab6c524e8b3b5c27db8217fcb6029cfaafc4a5f8ed37b73b808a753fbe7b79956a00338ccf680ce04242d0d0f2152384d4b7254d16f8746e40b82ee1d154552d3975415cf249e6060b00b6b9dd9d0e47de28ee578a1cc37f0953f128fa7d1bfe707176d42"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x2, 0x8c, 0x7}}, @val={0x2d, 0x1a, {0xc, 0x2, 0x7, 0x0, {0x3, 0x1f1c, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x402, 0x36c, 0x3}}, @void, @void, @void, [{0xdd, 0xcf, "66a231d5262f64708936cef7ebff34436fcd203bb32efd796afd035f355f9ce176de106d11c09202d01c3fb53458ea45fa8ee13727359a2adce4a84357a88d222643dd6817e579b31c8000c9bebe3a598f598bc8bbda93e1fa9c0403dd0a1da90d63a5a4d0aad300c145ce604014a98ea45f9063f49896cc1d1046500493ad11d1a4b45d41f82e7dbba987210cc35fadeb08c9d270f3be2f7488ea80040117c0c1ef3eae57ac92daf957bdcf729b7f600664c8528cf1695cb825da08dc3e346626c2ebcf44eeab76abab209192868e"}, {0xdd, 0x7, "9445cf7056cbe9"}, {0xdd, 0x4a, "bd2c307794580c2c8c1dc8ad1894bb985230362d3cd6a47dec6ece90849b2d27e30b5cc87134ecd9c4139125a0a9d16f33f991ab4adee0d4d0a27a067bbe18922aa936e4934efb7f1a65"}, {0xdd, 0xbd, "7adc69e09562c25c37db13ce8ab74f29f487f9039dd1c6bdb9467a7e7c6b741f65fc79626298a6c28c7c6fabd9e6ccf9871adee57ec9b2af363fdf98b7ed10ff246cfa0d3e077d7cc61b3bf24d3b008dfa8af6bbf7dacd77571553e1acb916977d3a16fb00dd0c9fa52027154aa08179a3602178acc7987ae28998d69421cc3e95da23cd4f736c9130778492622f80f70f9d10a30aef95302b0228b33dfdd5f991f5be85bfcc1adfc88e22c0da2dbe06527de079999dfbfb8a13438e0d"}, {0xdd, 0x13, "b4e215171cd198660185c9a67f2bae8a57f9d8"}, {0xdd, 0xab, "81189fa1e81012e4aaad6813db45dfd1d22f85c9e53803d9f60fe384545d871b5e82b2d71c82f8669ac6a59dd64b0dd2ba0eab6012e17a4f51c108569978bd78eb102740966aabe91d6e7ff72e2cc355888eb041e87a55112b4dda266837917bff49f361a29e0f496f02c87f05dd1ac23880d072f20e9631570d0384a15aaa207d5b8d332dfc854f0c1cccafbf4ea53cd55c598f3d887cd796fa3fc191bf8922034f7c0e380c8ffebd0279"}, {0xdd, 0xf1, "b20657f105ab447269761b684299b82debf881d037d5482f6563f1c6c670de244d9994f5c18ef7c04a091be640e2f95133d09ebf9326d01bee58e9678e7489a3d8468904c45d83374c3ca0e69b34e6172edc9388a4afdd76385a240648276c74c760c4e6e0f22dda7a6e9ccf8871f01a7a46f8951a540dd4e47a84a1307516daeb40f98f17f7a68cd8c44f17f6f75a027b8566131bd7ed30aa2868e57da1a9c9afeab4c2b4a42c05393b6db89ca7db3a888cc6bd7a8a05fc0b7bb2d41e4a5961c83dc6dd2ac831451815c52d1a5aaaaf14ff55877b4f8c57f0a984d2ea6d6536bc6d7cb437a002b7b4d57901a4c5b35c20"}]}}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x101c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "9ca965b58d30e544fc5f79763fd43da6f634687548eb73c8956a66f0eb51bc2bd5ff1b10ec0a1470a37a60a0982057ddfa2f3f6f43dfba3c1bbc70d18dc7afec366b70c16c8d5c331858197b36c1be02368b9b6dc4ff294240a5b95234a458cb76635c91efe908a56bd84f682ec546f7b0e69425c0233d14e801a280d61e10eeaf78e73b84a35b86b4b9367503fa0b0f76d414eb6799e47d6c5b58b3bfdf56e8a987300254649db53fe9e3e9d6cc78ecba0b5bbb4b8660c309d5018a965872a8e07d26c079b4464a29abb3dc6bcbf0a5b781cf0d01e88e3107a7416b8c2983e522aea87da3f5cd0baea0d144f9f8d2f277b2a9faaad08c4e63cb1f3dd1225ff0b56f5778d9f16f8ac95b625ebfc522356d5ee2e585ff23f3da2db7867ac476985016b1c4027b186f4ee57782bd9b100bd112d4776a7b489dec7a105ae05ab116661c328fec5117c7cb197a724afae58e9f3cc262c617d1cf9d8e7381becf79eced2e0d6ba5994858a8a3967f18a4827d180ff851527ee0c9f074f335a910be982a808453b8e6f4590340eb0a0e4aa8b4c7f601ebffe12792d3f15a1c1138e1233d52679c9017775ab6c7805ffbe64bcab0094b16e34691782fae85b37147bd92660004f0d6a09434a88359a2ba0c6e4c932076b6d8715bd323edfbcad26325f3213ce7e328d8d5bedb300f27e82ed24c940d626a324821d344e90e89e0a0d30d7b0378667535d68859de7ef35b1c7bc1b8f23634a2a122b4a3df2190781a6fd14a6cb46960d58c7be483b18970e729ac54be9366fba37ecf23235f7827834f6d2c3d0c631b3e890291dd710d51997da56e9501c25bd80b29ba2710c08fa24d823704f25093ac5bcd2e1605b356fb766f2055a355561861ddc30e9482d1d5d0577c3320e45c67ef834450158c5500edb8c769f0c83373220f16731179d1bd37de1f38b76d785c143febec6c90ded03b17aed9c02b9cba5ab7ff6f19b40354b1c12e0c9a3bffececfc517f16b478b83e6d79fb26c41414b57d364b0430c1cbfb1ec47b5cfa5933f7108d5963ffc5de729cc735284f7d0d56421934e3cf063f167bd4c510b7cfcffd60bc28d3e456598d8e19d7bfc4edd5f8df5e5a69154ccec45c3fdfb3afe9e9eb4c5f56bb8d5b69bf2652197ab552ee06932226ef3eb2f4cd4c5bfd3b375bc8ae2c70f5685971fa76c61fd537b733a78cedcdb01a422fb1893315c60edbb3ca63d4851c85d085b1d8bae119e97750b69f36fae59d7f77cc94c786d219a6d06f88b0c33a91511ee1e1a26a51ab8a5fa405dcfe55abf5e6071754d5faf8dc194a3aee2991e65c73b74cd61be29b7e844a2bb1ce5f6e2a6057bc2946bb4465c5e413025a96ef315885d1cad1265eedbae0b5dc7144b4c0c4375168edfe4fdfab096eb8bd2255137b697fc214c6665cdc80c6cb01e7767537a601afef2fd1b966f4670c099993deb65109c78520dcf4fd60482c0f42db452c13ecf38f1dc89665820aa063b8fd2421ba1b587cb6958b2145bc0e395a218df0815ce06339fda38e27ade1c3324dd76c8541615abe686d7f7d9bf3167e7f49f94407f1ca973cacec092fe6cc4ca4765fab7342264bfab07cd67f06b3a6adfeeaf482222796834a4cdc3284baac6f0e67a179e8851a3815494f3facd322b2b8d56d4e0ddf76b4c6c9e9a796b96f62fd8f64ad86e9d7bd53b52473f4163a5175fec13a84da0d332e2ae0185ac8d312c426d7c7dd7fea109b7e27c1d711ee18c00629dd4efdf20bbb55a963fa2d86d00ac0b2f019d2ddc68252ce19852ccf9b27d1b2489ffbcc33dfb8f0c0b1b76e78544573beb088af5a6d73c0ab677b224d9732681338d4205cdce0ea5d99ac26f653fe6a8065efb5e2dcaa1aff41eb68e8bfef1cd8e0d3d9b1efbe195549689d59e66b621d24168c887ab0e469c615a6015417830115276b75373d7ddd581bea63d5a287d321c98a5c2982e5e98e413561f0442307b222d9fbe4996822de5d6e330868aa1bd43ca14cd539537054aaa9ea220234edd5e6c05294ddf77bafa13c7c23b24b346ee2172de86d55d67447d3b291ae1997c24cf7b2711e19f9f8119b0ad626d67c1c9ec48583e4ca16134065538a91bb9e4eaf9890e10a07d78511a24036a2e7cb489fa87d6b605a85624fd87cb712d706c514cabae0cc8dbd4216122b0fdf1d886381964ab829e4a28e102699d8ac029c046ccd15205187c306fd6a54a61d0432e55f320e16bc96c7cfde61e6bb8b50d36e633e958ee619d3bd63417b63296edfeda639358d7084e45630df12918d6d120c53e745ef6f18f17360a985b8a6204a8636035f739885aaec9af72f8fe88e7b623f9120c1ab8d854c463e5982aa607b8369b8641c2955775c397efb248ac58b7f0e3944dbfde6343387f88056a7449647934e2ed21179ea922e20857568ba3dfe051ec41af19d3ba2c1eb4a113c225cbd0e47a82f479d20ac9fbe9af5cba8f9a3b2210ed260164ed0bfaf74ba2b0ba42468e7add93049b3aba8c45b15a4f0f5aabe546f465407f13fd2b1d60c1bc05ef09dd11e6f054082d37d68882ad019a26371b5c47598423e6a6223eabfaf73df1bee7c689447135ed4f5162b5bd0fa522fd86aee63c02090f455af6ba66d7b69a54b2ac0e75dff9eff8cff684d15710edbb9da18ed7e30369cc4a83458044c1d9bbcae55b9b01b806c95ae40b820ba581ea792e03f5df61e5612914b2efa69f46a18216dcbdcaace71b42efe499f83404e5d1aa722367e9fe0fa93656786a8e9a10b97b4f5bf67ac4ada894c97daa959bdb209856b4fefd1067c91f628fc3cdb0689624846ffdb2c7cd822db8f3543d57e960a2b41976a7c7d1ad3c703a0e77d3544fff74725d06bf979aad177ee18e08ae5bb7c8bd0acf955e724e80e60d85ed7c2ec3ddd9c2a7c381384438525b382aae84f433d88fe39936f883fae014c354028f638a93faf557ed0b6ad7c7b4ec18eb47e5e739b1f997077364dcd429b43f2d855d54ebe4582dfcdd2667e7e73417e6f050a8c751a42b512b80e476b9ed58f71049342d220bf47c25d81e15aa0508968d2cea74073217ed7e9555dbd52a0b751b5a89cd624c5fdb7f94cd67ecdd757a8adb054e4af6832b3309227b87e70e78892a818a71ad5d0bf0c25f3d498b53c895186230db1da0df46041f3b8243090c1127c1df0fadc6cfdab21dfb7789e1b97a923f3d4852772bb32a586efb0c73e36fa2655970ec7b6fc16f751c82b678b6e89daf42e5a04f3f1fa0179bb856074d8138d8d05bb3e27766d9a51c89ed764f686062f7bd8cd3d235d9680a7817090f1907e8adaa8aad8520a7d0b57faf0e86137c999c08d7f152e4470d9881f722a7662588ebc4fca4135d24bf1be38460247479c2a55af855491a4de813edc64de4f8e750fcdf7edbf1d9be2df610d02474436792b84108a216aad1d315439bc3f06d16616bb9f48179402442558108278223f1968bd66191bac239fb951e872228168950d5382aff4321b7da898c65a2ac1a1802648ddb69a79f464293ff23471eade0a373e8d1e70bb341861ad1143d722a151da130f50eefd48da1b48abe2b73c0574ff9ea2f7dca0b97b45092fff2459de1d5dd337eec149617d7efab1cd7222227e9a5bdaa5de7c3e92db231542137d5e7fdd7cd7c1bab96c95978da4a460c63fcc060aa755a560feeccbc47cff079a1dd215f55726c5ac1a0d1ef2d42f34e8597eee692c86f9bf00bb5ff168a958e5f2ed283bb5a4b2651de0acc91c1008ef84243855d1e798d9d5290334c1874c2e92cbfe0d068a5d475c49e32c974d2a3e7de0b8dbda8f5ad8182a987f16c770be64440135540fbf4de1d087c19b025acef88dd7ae4046e7ed12a21e2d9266e2288cf50a279638c2ac4163e8466e55cc2e54e45246082479f8fad5beca907b9c43b8854aaa600bf55a1092d6b44dc9948cca3e28fed90c08e84a1e58e81f038a64ed5959af06d5aa0c33e133c47a1787b701f6c577a807aecd6e545216afed56c3a8468b4b36e8993ebd324bff53a50325fa7c70d75843bf66da4b4d0f2cbf3c0aea33a08b311911d70585db7c8cba3502c1726a24bc0d22dba46bd5495a5f9ebdc24dad496e1f78f3c17977e552dd826b737ff3e479dd1a1f006fa94aa181068ef5b39f11220e0af57055d085a55279dcac1da6a7b8dfdd67c567a1de1c7faf610716a1465af0bd9f49f1b2b8f2413dd216f300500095449299d38ec0079e4aa26a22e3863395d78bcc94e1fb9171b6709e9bc2011555555d8e20c4f649b59a02a7806962d1298f26152b2af886cf816ea9cf40eaf378a0f89f36ebe636c6ecd4a533fb8e18f4b82c870470415a4285f3fafaaddb5efb07c68adb79f91ea4d82937273fa22e4380a3329894444b20d734cee0841969a6a3ce571fdf5c432ac7a577d4907f2847410840f594f8f1e3fc417eead143820db9ca534b8e0b7cb113141f1e46a1127d57845822658617cd82c13b5ca987ee4d9cb7869c9c8c27655be0eb50fbcaa6339687b597fc4dee0148455bfcbd4666c76e09e13c194d84aced97afc213fdcd7d8bf774e35a750d506808e0f580cdcd54afbd5ba8e21a614a2730c03f2eb6f5b2fb6273459dabd0108dcfc6a377b46dcb6eacb4cfc9a282de9f493b9ca9c88c739db1a7724c5b4473f318e35f5b43f12c02a750aeab41bff78ee6b2ab0494f9b2c581c826f787e99194e4627de13bd4ffe2cbcea63203a73c6b11e90522431420a748297322e84fead22d0d896e47c7a73b7b79f16324bfe76490ba198be5245f00b4602dd32d26d8b792e39fd3698c302f8b2699deb3fc7c48e99bd799d8192c1aedac860f09220468150ae596efa9c04bc5d8ab3915746d912b07c7a8df6f878c59e9d19cef312b8a555c5b27540e669971d303a6290d2a0c3379fc87ef5f779f748ebdb8a508baafaf0919e7cf0bef5830634a2db4d5ac0e2a568d3eefed45487137d28e34f8e3b69aafb324a7940fd2fbd11c903e2cd69e838266b59ac378c1de0285556ef4fcba4c66e24361a86ada6218485069dbf3d5fb2f84a6b633afcb4b9802679d82fdc9a4d9b3fc042a3e455f5556e6fe253333ff07450315d0ac8aae5fafa1c4745ead09adac073899697e3669ee696b9eeaed7aad76ec3f7156ce51a7a3e9eaf441560d5ffa037e5dc4579fea4b130af312ac5dc5de2eeb5e455cb79097da38f5817043e448b3f8d420f2a5c826802daefb2d9f3d4987c4322a637d5e6def84354ca15f0b8ce011851355e379c92edf1af9d0012aedda4f9b4f6ed96767fb980c096c8a1d4b4009fd1942f3c01dc935561ccecece4fbbf94d6273b152c9d14481576d4a8700152d3c89fdce0dd45eb59a53c4a1eaab7ecadb2a968893ce697f40751cfa7f40ac1b623282a31b1cd2d91be193690f79e010de33614f4673be5eba43fcb5f0b051730be36c26f47b1dc8e8aa2d8ae4086af1b726a0b8a5f201b70eb202faa37ff971e13f593f7e295124a214a7e8a6567593ab361a25a8b54aaddf9203d0da09b9de6b73fe1e0052e5a9e1822808b9648ffd31234620c6e1d2fc9b88f60fdaa61a02eb40102b5dc29b827561935a48078cc7197b691c18ea0ed01881283a29ab904f6c6da6dc6fc191af6c99dd5c789671047086c7b6114cf654b8d18bb3a1fd566780cadb9573451af81455f30862b72359361806ee7acf27eb39bf31d9b4643f64ba98284c5c8cde45b2128274112fe085b4c8e2e69faac490e024a821fc12ff8c30749b698b3af776aa4ca8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x735, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xe6, 0x80, [@peer_mgmt={0x75, 0x6, {0x0, 0x85b, @void, @val=0x4, @void}}, @random={0x9, 0xb4, "206b03fc4b3220f5c2d1167b7d9aad0604f3f114801cb92aa79b505485667d5b53034ada20bebdd8525f8b6173fb925867a187052b034178e6483d1383e4e37d901a4da09cb2cd53dc0691e24fde1df68fbbcf06361bb554bcc57e82db76a464d9a49e3bd9759cbfbf90ca291bcd816aee488db46f6efe352affc7fcf8aefad216fca87dccb239f7bad4eee3ffee6ba2d73845560e1aa75e96ea8d5ba955de9af10e29b4f907007750315965920366dc56cadc80"}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x1, 0x0, {0x50ccd201, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x200, 0x1}}, @cf={0x4, 0x6, {0xff, 0x3, 0x4}}]}, @NL80211_ATTR_BEACON_TAIL={0xd8, 0xf, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x84, 0x1f}}, @gcr_ga={0xbd, 0x6}, @perr={0x84, 0xaf, {0x8, 0xb, [@ext={{}, @device_a, 0xffffff81, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x7, "", 0x3c}, @ext={{}, @device_a, 0x2, @device_b, 0x37}, @not_ext={{}, @device_b, 0x0, "", 0x3a}, @ext={{}, @broadcast, 0x3, @broadcast, 0x2a}, @not_ext={{}, @broadcast, 0x9, "", 0x16}, @ext={{}, @device_b, 0x5, @device_b, 0x2a}, @not_ext={{}, @device_a, 0x77bc}, @not_ext={{}, @broadcast, 0x480, "", 0x21}, @ext={{}, @broadcast, 0x400, @device_a, 0x31}, @not_ext={{}, @broadcast, 0xea3d, "", 0x17}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x1, 0x7f, 0x20}}, @ibss={0x6, 0x2, 0x80}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0x1, 0x80, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x101, 0x1, 0x0]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x99, 0xf, [@fast_bss_trans={0x37, 0x85, {0x5, 0x3, "f518f5a7ab8f8e75457c128cb7f75188", "0699c50f700cb2f2440ae6155b47b12c6d1dcc54743ca307ee312e75c1f5ee32", "1a6925041d21d8c92faea26ff04ca66eb33f72510c9321c5e4ae1f1cfa8f7e7d", [{0x4, 0x18, "634925d3863b3c4f013b2ddae7b7de3d3573440454b3ef9a"}, {0x1, 0x10, "2cba91dedb165567431e4bcc35c6c4fb"}, {0x2, 0x5, "41d9bbacd5"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x143, 0x7f, [@random={0x8, 0x7c, "107c9c19f6cd8d2e5d7ab0f7dc3046221cd46c80a053554c4655c1257de628cf5f9c915eff8768199164cc63a4ca3126b91d7a0889a6e68521e6b8af2f36b34f0471e331bcd3642314c0ba859521167959b9d85e0ab373fecc467b8a1126c06ece6a55a0836448b79905d8a2433a0fc35c1a4cd61e5f67e63255b13b"}, @chsw_timing={0x68, 0x4, {0x3, 0xfff}}, @chsw_timing={0x68, 0x4, {0x5, 0x9}}, @random_vendor={0xdd, 0x4b, "0f1240fbbf39644beb3f72db1d6d61d9b217011ede1956eb37fec3af722af2de7af308899ffdf8c7844ba785c3be65eda0b1915c8e9d7b5f2259e80232fd4f03fff601623725e4f52abee0"}, @preq={0x82, 0x41, @ext={{0x1, 0x1}, 0xc1, 0x3f, 0xffffffff, @device_a, 0xfff, @broadcast, 0x7fffffff, 0x5, 0x3, [{{0x1}, @device_a, 0x100}, {{0x1, 0x0, 0x1}, @device_b, 0x6}, {{}, @device_b, 0x80000001}]}}, @ht={0x2d, 0x1a, {0x8, 0x3, 0x4, 0x0, {0x7, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x80, 0x20}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x16f, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @initial, {0xb, 0xe45}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb80, @random=0x17, 0x40c0, @void, @void, @val={0x3, 0x1, 0x8c}, @val={0x4, 0x6, {0x6, 0x0, 0x66, 0x51d}}, @val={0x6, 0x2, 0x100}, @val={0x5, 0xc2, {0xe5, 0x5e, 0x7, "012f4281245c549ac0d906bffe625449cdb0c2ce7feeaf3234c23563663d54d9c6745afa02557d13fb565d215de0e86e791e6bb68ff8d6276f5cc6787b535adfad5877cdab631b09c9aab3a4d8ddae2a7a186152bdcc108403967b384950e4501cca1a8f2302fbac37c5f8b822ee7a5c4e6f978103377b80bc221b4b6d788a929f6004ced1c75ed7e977046ec6b06dac2e34ad89e9032d2728a9d557c0128fa1010f746d076d2db403db4a15ceeaaca062e8ae99d120107d610e21d729a277"}}, @val={0x25, 0x3, {0x0, 0x7c, 0x9}}, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x8c, 0x24}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x0, 0x0, {0x4, 0x88, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x2}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf8, 0x3f, 0x6, 0x1}}, [{0xdd, 0x37, "1370ef9e2ca18611b3dfbb2b7996c7b20ef81e1cf1633cd0742bd0619cab8674113b930f3bee894a793b110daf963879f55575fbc63672"}]}}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CSA_IES={0x944, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x7, 0xbc, 0x3, 0x3, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x1, 0xffff, 0x0, 0x8, 0x101, 0x81, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x1000, 0x92b, 0x20]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x104, 0x7f, [@peer_mgmt={0x75, 0x6, {0x0, 0x7f, @void, @val=0x20, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x0, 0x5, @device_b, 0x5, 0xff, 0x1000}}, @random_vendor={0xdd, 0x44, "e5253c79b57b04d65bf08df4a3b653350418801357a1b8cdf780713b30ed9243abbf10cfe048a975a1d06414b4fea5743e678ac3928fd617b356e435af917b9e137ea4ab"}, @channel_switch={0x25, 0x3, {0x0, 0xc9}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0x8, 0x3f}}, @fast_bss_trans={0x37, 0x86, {0xc, 0x2, "6e82a437d7894a24c54a4bce02e70900", "a48f95eca60cbae9f5f22defb4edaa4c36b76265c978f2059be642303113c8b0", "5247168e015815c5f6ca329475942f310b7f08537f989b62f3b960284f4b46af", [{0x4, 0xd, "9f61904e638bf407ad31df3a31"}, {0x4, 0x23, "1b7d7ca721111ca1f148695d6d8a4d23dd41f4aa5fc1e79fd256eacce3bdba0e29aa16"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x1b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7f, 0x3, "380d5dadd379d0a2f4693db8ce7c8597ec0e7f431fdb668db55706d4cc38f54e3110c30489478e5d9c73ca034fe779739427b3a897e762fbdb988503f11bc3b06e18768956826b0fbb3a5d5f4bf9192707c3977f54421a4d491c4f20ee8178d52fcd80cdb24c6073a4a1a16d26d679af86f3c7cf64467721254d53"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x46, 0x3, "7e44e9395efdb5f8d92e10b69df7498a115c22fcf2744db49651fc048f09cbb109e0243e07788abe882c49cf3ede64c4345034150663112bf4729e41aaf4b65f382c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "8a358f3f5cd523941c394ab173e3ff05af910a0bc83824aaa884df0b143e6fe7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb7, 0x3, "59fd20649ff34e1d796624be80bd79ad179362b13343893e977659efa4005fb928b36cda14dceeb4a2c110a189831a7acbf381580d5909d050756188b17bd280c8ff99cc605d47faa68a4374705c1d38b8c7108f962b782f834e7400a84da009d94f446bcbd8fe5e78bed337728346b556eb426a09cceac31bc2e6255ea93f1e84976e32c6b785fdbf1aee1c4f1b212433865cae025da656a1caead67f515881e4c50270a0a15b59e369bbbb80dec634cafd97"}]}, @NL80211_ATTR_IE={0x5c, 0x2a, [@measure_req={0x26, 0x4e, {0x98, 0x80, 0x4, "bdc576f46c65a4dd9137e6914cf5be2c42523b88bb99a3fb89f616546723b4f105549f9b419e300c7e62f869f1325b137ed4ca92482ee9b0765f633c0d415f0316e4f22711d1d2894f7a15"}}, @cf={0x4, 0x6, {0x7b, 0x5, 0x4d, 0x100}}]}, @NL80211_ATTR_PROBE_RESP={0x5f2, 0x91, "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"}]]}]}, 0x2b0c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xdf) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r3) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000100)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(0x0, 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:22 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r2, 0x719, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000000300)={0x110, r2, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x40000}, {0x6}, {0x8}}]}, 0x110}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40840}, 0x20000001) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 423.373469][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.381216][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.388952][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.396635][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.404978][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.413073][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64], 0x6f) [ 423.420832][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.428788][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.436460][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.445124][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.452918][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.460666][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.468380][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8807e007a00010003200800a50a1b000800ff7f05022c008149ef0400800202ff030202040002026a070202000610030102000001000003000000010000000f0404000100018002bc04004b0401000c1f0500020400000000000d060800050080ae000009000cf70500010100800507fa040005005000"/131], 0x83) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9302500210001000d08080001002c0a060000000c3f05001f20060007032008000900050006000200"], 0x2a) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2}, @l2cap_cid_signaling={{}, [@l2cap_conn_rsp={{0x3, 0x7f}, {0x1000, 0x8001, 0x0, 0xfff8}}, @l2cap_disconn_req={{0x6, 0x3}, {0x6}}, @l2cap_info_req={{0xa, 0xdf}, {0x1c}}, @l2cap_create_chan_rsp={{0xd, 0x1}, {0x5, 0x8, 0xfe00, 0x401}}, @l2cap_move_chan_req={{0xe, 0x80}, {0x80, 0x2}}, @l2cap_conf_req={{0x4, 0x1f}, {0x63ad, 0x6, [@l2cap_conf_efs={0x6, 0x0, {0x7f, 0x2, 0x3, 0xfffffffe, 0xfffffff8, 0x10000}}, @l2cap_conf_ews]}}]}}, 0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x1, 0x8, 0x2b6, 0x5}}}}, 0x15) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 423.476045][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.483934][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.491946][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.499673][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.507379][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.515050][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xcec774a3c4e02e17, 0x35}, "e05c7e7be82dacfa51a7d0580a54ea243bedd87ffb725047c931757fce0fc4463f125367f71383c576baff619affcfd33390673e0b"}, 0x39) [ 423.522811][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.530637][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.538385][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.546981][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.555788][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.563606][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r0 = socket(0x2, 0x2, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r2, 0x719, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000000300)={0x110, r2, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x40000}, {0x6}, {0x8}}]}, 0x110}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40840}, 0x20000001) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (rerun: 32) [ 423.571613][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.579326][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.587000][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.594726][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.602457][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.610669][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.618541][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(0x0, 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x406000, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f00000001c0)={0x2b0c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x21f6e96e, 0x14}}}}, [@NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xfff, 0xdb, 0x8, 0x44c2, 0xf08a]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0xee, 0x2, 0x5]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x245}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x2154, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x4bf, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_a, @from_mac=@device_b, {0x1, 0x7f}}, 0x2, @random=0x4, 0x0, @void, @val={0x1, 0x5, [{0x48}, {0x1b, 0x1}, {0xb, 0x1}, {0x60, 0x1}, {0x24}]}, @void, @void, @void, @val={0x5, 0xd2, {0x5, 0x30, 0x0, "3da3fa7b4ba10b34e1c332be37b04fdf2d5edeb1b315d910df66815f02257ac0fc036178f7bc27236bb94e6979db77beb799475535daf48918d01e0aef18a065389242c10052456a9add1cbf0b7855a6e654d0fc137c1e2acff60961fc5fd3b8b7964e7c912d8c3944285ab6c524e8b3b5c27db8217fcb6029cfaafc4a5f8ed37b73b808a753fbe7b79956a00338ccf680ce04242d0d0f2152384d4b7254d16f8746e40b82ee1d154552d3975415cf249e6060b00b6b9dd9d0e47de28ee578a1cc37f0953f128fa7d1bfe707176d42"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x2, 0x8c, 0x7}}, @val={0x2d, 0x1a, {0xc, 0x2, 0x7, 0x0, {0x3, 0x1f1c, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x402, 0x36c, 0x3}}, @void, @void, @void, [{0xdd, 0xcf, "66a231d5262f64708936cef7ebff34436fcd203bb32efd796afd035f355f9ce176de106d11c09202d01c3fb53458ea45fa8ee13727359a2adce4a84357a88d222643dd6817e579b31c8000c9bebe3a598f598bc8bbda93e1fa9c0403dd0a1da90d63a5a4d0aad300c145ce604014a98ea45f9063f49896cc1d1046500493ad11d1a4b45d41f82e7dbba987210cc35fadeb08c9d270f3be2f7488ea80040117c0c1ef3eae57ac92daf957bdcf729b7f600664c8528cf1695cb825da08dc3e346626c2ebcf44eeab76abab209192868e"}, {0xdd, 0x7, "9445cf7056cbe9"}, {0xdd, 0x4a, "bd2c307794580c2c8c1dc8ad1894bb985230362d3cd6a47dec6ece90849b2d27e30b5cc87134ecd9c4139125a0a9d16f33f991ab4adee0d4d0a27a067bbe18922aa936e4934efb7f1a65"}, {0xdd, 0xbd, "7adc69e09562c25c37db13ce8ab74f29f487f9039dd1c6bdb9467a7e7c6b741f65fc79626298a6c28c7c6fabd9e6ccf9871adee57ec9b2af363fdf98b7ed10ff246cfa0d3e077d7cc61b3bf24d3b008dfa8af6bbf7dacd77571553e1acb916977d3a16fb00dd0c9fa52027154aa08179a3602178acc7987ae28998d69421cc3e95da23cd4f736c9130778492622f80f70f9d10a30aef95302b0228b33dfdd5f991f5be85bfcc1adfc88e22c0da2dbe06527de079999dfbfb8a13438e0d"}, {0xdd, 0x13, "b4e215171cd198660185c9a67f2bae8a57f9d8"}, {0xdd, 0xab, "81189fa1e81012e4aaad6813db45dfd1d22f85c9e53803d9f60fe384545d871b5e82b2d71c82f8669ac6a59dd64b0dd2ba0eab6012e17a4f51c108569978bd78eb102740966aabe91d6e7ff72e2cc355888eb041e87a55112b4dda266837917bff49f361a29e0f496f02c87f05dd1ac23880d072f20e9631570d0384a15aaa207d5b8d332dfc854f0c1cccafbf4ea53cd55c598f3d887cd796fa3fc191bf8922034f7c0e380c8ffebd0279"}, {0xdd, 0xf1, "b20657f105ab447269761b684299b82debf881d037d5482f6563f1c6c670de244d9994f5c18ef7c04a091be640e2f95133d09ebf9326d01bee58e9678e7489a3d8468904c45d83374c3ca0e69b34e6172edc9388a4afdd76385a240648276c74c760c4e6e0f22dda7a6e9ccf8871f01a7a46f8951a540dd4e47a84a1307516daeb40f98f17f7a68cd8c44f17f6f75a027b8566131bd7ed30aa2868e57da1a9c9afeab4c2b4a42c05393b6db89ca7db3a888cc6bd7a8a05fc0b7bb2d41e4a5961c83dc6dd2ac831451815c52d1a5aaaaf14ff55877b4f8c57f0a984d2ea6d6536bc6d7cb437a002b7b4d57901a4c5b35c20"}]}}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x101c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x735, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xe6, 0x80, [@peer_mgmt={0x75, 0x6, {0x0, 0x85b, @void, @val=0x4, @void}}, @random={0x9, 0xb4, "206b03fc4b3220f5c2d1167b7d9aad0604f3f114801cb92aa79b505485667d5b53034ada20bebdd8525f8b6173fb925867a187052b034178e6483d1383e4e37d901a4da09cb2cd53dc0691e24fde1df68fbbcf06361bb554bcc57e82db76a464d9a49e3bd9759cbfbf90ca291bcd816aee488db46f6efe352affc7fcf8aefad216fca87dccb239f7bad4eee3ffee6ba2d73845560e1aa75e96ea8d5ba955de9af10e29b4f907007750315965920366dc56cadc80"}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x1, 0x0, {0x50ccd201, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x200, 0x1}}, @cf={0x4, 0x6, {0xff, 0x3, 0x4}}]}, @NL80211_ATTR_BEACON_TAIL={0xd8, 0xf, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x84, 0x1f}}, @gcr_ga={0xbd, 0x6}, @perr={0x84, 0xaf, {0x8, 0xb, [@ext={{}, @device_a, 0xffffff81, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x7, "", 0x3c}, @ext={{}, @device_a, 0x2, @device_b, 0x37}, @not_ext={{}, @device_b, 0x0, "", 0x3a}, @ext={{}, @broadcast, 0x3, @broadcast, 0x2a}, @not_ext={{}, @broadcast, 0x9, "", 0x16}, @ext={{}, @device_b, 0x5, @device_b, 0x2a}, @not_ext={{}, @device_a, 0x77bc}, @not_ext={{}, @broadcast, 0x480, "", 0x21}, @ext={{}, @broadcast, 0x400, @device_a, 0x31}, @not_ext={{}, @broadcast, 0xea3d, "", 0x17}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x1, 0x7f, 0x20}}, @ibss={0x6, 0x2, 0x80}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0x1, 0x80, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x101, 0x1, 0x0]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x99, 0xf, [@fast_bss_trans={0x37, 0x85, {0x5, 0x3, "f518f5a7ab8f8e75457c128cb7f75188", "0699c50f700cb2f2440ae6155b47b12c6d1dcc54743ca307ee312e75c1f5ee32", "1a6925041d21d8c92faea26ff04ca66eb33f72510c9321c5e4ae1f1cfa8f7e7d", [{0x4, 0x18, "634925d3863b3c4f013b2ddae7b7de3d3573440454b3ef9a"}, {0x1, 0x10, "2cba91dedb165567431e4bcc35c6c4fb"}, {0x2, 0x5, "41d9bbacd5"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x143, 0x7f, [@random={0x8, 0x7c, "107c9c19f6cd8d2e5d7ab0f7dc3046221cd46c80a053554c4655c1257de628cf5f9c915eff8768199164cc63a4ca3126b91d7a0889a6e68521e6b8af2f36b34f0471e331bcd3642314c0ba859521167959b9d85e0ab373fecc467b8a1126c06ece6a55a0836448b79905d8a2433a0fc35c1a4cd61e5f67e63255b13b"}, @chsw_timing={0x68, 0x4, {0x3, 0xfff}}, @chsw_timing={0x68, 0x4, {0x5, 0x9}}, @random_vendor={0xdd, 0x4b, "0f1240fbbf39644beb3f72db1d6d61d9b217011ede1956eb37fec3af722af2de7af308899ffdf8c7844ba785c3be65eda0b1915c8e9d7b5f2259e80232fd4f03fff601623725e4f52abee0"}, @preq={0x82, 0x41, @ext={{0x1, 0x1}, 0xc1, 0x3f, 0xffffffff, @device_a, 0xfff, @broadcast, 0x7fffffff, 0x5, 0x3, [{{0x1}, @device_a, 0x100}, {{0x1, 0x0, 0x1}, @device_b, 0x6}, {{}, @device_b, 0x80000001}]}}, @ht={0x2d, 0x1a, {0x8, 0x3, 0x4, 0x0, {0x7, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x80, 0x20}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x16f, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @initial, {0xb, 0xe45}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb80, @random=0x17, 0x40c0, @void, @void, @val={0x3, 0x1, 0x8c}, @val={0x4, 0x6, {0x6, 0x0, 0x66, 0x51d}}, @val={0x6, 0x2, 0x100}, @val={0x5, 0xc2, {0xe5, 0x5e, 0x7, "012f4281245c549ac0d906bffe625449cdb0c2ce7feeaf3234c23563663d54d9c6745afa02557d13fb565d215de0e86e791e6bb68ff8d6276f5cc6787b535adfad5877cdab631b09c9aab3a4d8ddae2a7a186152bdcc108403967b384950e4501cca1a8f2302fbac37c5f8b822ee7a5c4e6f978103377b80bc221b4b6d788a929f6004ced1c75ed7e977046ec6b06dac2e34ad89e9032d2728a9d557c0128fa1010f746d076d2db403db4a15ceeaaca062e8ae99d120107d610e21d729a277"}}, @val={0x25, 0x3, {0x0, 0x7c, 0x9}}, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x8c, 0x24}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x0, 0x0, {0x4, 0x88, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x2}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf8, 0x3f, 0x6, 0x1}}, [{0xdd, 0x37, "1370ef9e2ca18611b3dfbb2b7996c7b20ef81e1cf1633cd0742bd0619cab8674113b930f3bee894a793b110daf963879f55575fbc63672"}]}}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CSA_IES={0x944, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x7, 0xbc, 0x3, 0x3, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x1, 0xffff, 0x0, 0x8, 0x101, 0x81, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x1000, 0x92b, 0x20]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x104, 0x7f, [@peer_mgmt={0x75, 0x6, {0x0, 0x7f, @void, @val=0x20, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x0, 0x5, @device_b, 0x5, 0xff, 0x1000}}, @random_vendor={0xdd, 0x44, "e5253c79b57b04d65bf08df4a3b653350418801357a1b8cdf780713b30ed9243abbf10cfe048a975a1d06414b4fea5743e678ac3928fd617b356e435af917b9e137ea4ab"}, @channel_switch={0x25, 0x3, {0x0, 0xc9}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0x8, 0x3f}}, @fast_bss_trans={0x37, 0x86, {0xc, 0x2, "6e82a437d7894a24c54a4bce02e70900", "a48f95eca60cbae9f5f22defb4edaa4c36b76265c978f2059be642303113c8b0", "5247168e015815c5f6ca329475942f310b7f08537f989b62f3b960284f4b46af", [{0x4, 0xd, "9f61904e638bf407ad31df3a31"}, {0x4, 0x23, "1b7d7ca721111ca1f148695d6d8a4d23dd41f4aa5fc1e79fd256eacce3bdba0e29aa16"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x1b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7f, 0x3, "380d5dadd379d0a2f4693db8ce7c8597ec0e7f431fdb668db55706d4cc38f54e3110c30489478e5d9c73ca034fe779739427b3a897e762fbdb988503f11bc3b06e18768956826b0fbb3a5d5f4bf9192707c3977f54421a4d491c4f20ee8178d52fcd80cdb24c6073a4a1a16d26d679af86f3c7cf64467721254d53"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x46, 0x3, "7e44e9395efdb5f8d92e10b69df7498a115c22fcf2744db49651fc048f09cbb109e0243e07788abe882c49cf3ede64c4345034150663112bf4729e41aaf4b65f382c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "8a358f3f5cd523941c394ab173e3ff05af910a0bc83824aaa884df0b143e6fe7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb7, 0x3, "59fd20649ff34e1d796624be80bd79ad179362b13343893e977659efa4005fb928b36cda14dceeb4a2c110a189831a7acbf381580d5909d050756188b17bd280c8ff99cc605d47faa68a4374705c1d38b8c7108f962b782f834e7400a84da009d94f446bcbd8fe5e78bed337728346b556eb426a09cceac31bc2e6255ea93f1e84976e32c6b785fdbf1aee1c4f1b212433865cae025da656a1caead67f515881e4c50270a0a15b59e369bbbb80dec634cafd97"}]}, @NL80211_ATTR_IE={0x5c, 0x2a, [@measure_req={0x26, 0x4e, {0x98, 0x80, 0x4, "bdc576f46c65a4dd9137e6914cf5be2c42523b88bb99a3fb89f616546723b4f105549f9b419e300c7e62f869f1325b137ed4ca92482ee9b0765f633c0d415f0316e4f22711d1d2894f7a15"}}, @cf={0x4, 0x6, {0x7b, 0x5, 0x4d, 0x100}}]}, @NL80211_ATTR_PROBE_RESP={0x5f2, 0x91, "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"}]]}]}, 0x2b0c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xdf) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r3) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x406000, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f00000001c0)={0x2b0c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x21f6e96e, 0x14}}}}, [@NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xfff, 0xdb, 0x8, 0x44c2, 0xf08a]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0xee, 0x2, 0x5]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x245}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x2154, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x4bf, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_a, @from_mac=@device_b, {0x1, 0x7f}}, 0x2, @random=0x4, 0x0, @void, @val={0x1, 0x5, [{0x48}, {0x1b, 0x1}, {0xb, 0x1}, {0x60, 0x1}, {0x24}]}, @void, @void, @void, @val={0x5, 0xd2, {0x5, 0x30, 0x0, "3da3fa7b4ba10b34e1c332be37b04fdf2d5edeb1b315d910df66815f02257ac0fc036178f7bc27236bb94e6979db77beb799475535daf48918d01e0aef18a065389242c10052456a9add1cbf0b7855a6e654d0fc137c1e2acff60961fc5fd3b8b7964e7c912d8c3944285ab6c524e8b3b5c27db8217fcb6029cfaafc4a5f8ed37b73b808a753fbe7b79956a00338ccf680ce04242d0d0f2152384d4b7254d16f8746e40b82ee1d154552d3975415cf249e6060b00b6b9dd9d0e47de28ee578a1cc37f0953f128fa7d1bfe707176d42"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x2, 0x8c, 0x7}}, @val={0x2d, 0x1a, {0xc, 0x2, 0x7, 0x0, {0x3, 0x1f1c, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x402, 0x36c, 0x3}}, @void, @void, @void, [{0xdd, 0xcf, "66a231d5262f64708936cef7ebff34436fcd203bb32efd796afd035f355f9ce176de106d11c09202d01c3fb53458ea45fa8ee13727359a2adce4a84357a88d222643dd6817e579b31c8000c9bebe3a598f598bc8bbda93e1fa9c0403dd0a1da90d63a5a4d0aad300c145ce604014a98ea45f9063f49896cc1d1046500493ad11d1a4b45d41f82e7dbba987210cc35fadeb08c9d270f3be2f7488ea80040117c0c1ef3eae57ac92daf957bdcf729b7f600664c8528cf1695cb825da08dc3e346626c2ebcf44eeab76abab209192868e"}, {0xdd, 0x7, "9445cf7056cbe9"}, {0xdd, 0x4a, "bd2c307794580c2c8c1dc8ad1894bb985230362d3cd6a47dec6ece90849b2d27e30b5cc87134ecd9c4139125a0a9d16f33f991ab4adee0d4d0a27a067bbe18922aa936e4934efb7f1a65"}, {0xdd, 0xbd, "7adc69e09562c25c37db13ce8ab74f29f487f9039dd1c6bdb9467a7e7c6b741f65fc79626298a6c28c7c6fabd9e6ccf9871adee57ec9b2af363fdf98b7ed10ff246cfa0d3e077d7cc61b3bf24d3b008dfa8af6bbf7dacd77571553e1acb916977d3a16fb00dd0c9fa52027154aa08179a3602178acc7987ae28998d69421cc3e95da23cd4f736c9130778492622f80f70f9d10a30aef95302b0228b33dfdd5f991f5be85bfcc1adfc88e22c0da2dbe06527de079999dfbfb8a13438e0d"}, {0xdd, 0x13, "b4e215171cd198660185c9a67f2bae8a57f9d8"}, {0xdd, 0xab, "81189fa1e81012e4aaad6813db45dfd1d22f85c9e53803d9f60fe384545d871b5e82b2d71c82f8669ac6a59dd64b0dd2ba0eab6012e17a4f51c108569978bd78eb102740966aabe91d6e7ff72e2cc355888eb041e87a55112b4dda266837917bff49f361a29e0f496f02c87f05dd1ac23880d072f20e9631570d0384a15aaa207d5b8d332dfc854f0c1cccafbf4ea53cd55c598f3d887cd796fa3fc191bf8922034f7c0e380c8ffebd0279"}, {0xdd, 0xf1, "b20657f105ab447269761b684299b82debf881d037d5482f6563f1c6c670de244d9994f5c18ef7c04a091be640e2f95133d09ebf9326d01bee58e9678e7489a3d8468904c45d83374c3ca0e69b34e6172edc9388a4afdd76385a240648276c74c760c4e6e0f22dda7a6e9ccf8871f01a7a46f8951a540dd4e47a84a1307516daeb40f98f17f7a68cd8c44f17f6f75a027b8566131bd7ed30aa2868e57da1a9c9afeab4c2b4a42c05393b6db89ca7db3a888cc6bd7a8a05fc0b7bb2d41e4a5961c83dc6dd2ac831451815c52d1a5aaaaf14ff55877b4f8c57f0a984d2ea6d6536bc6d7cb437a002b7b4d57901a4c5b35c20"}]}}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x101c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x735, 0x91, "6e53432f9f3eb95354a3f882b016ac9e44dd3e08affe018a2271d435302e8dad3585615819bdeaa21e5bc5d39846215c600ecbeab81dfe8699336df91e25a1b48d325480c0ed8d37be962167f068a6ab2701bbb569ba3b76829b76ade0f730cf87fe54debbeaaf76ee70dafe8610e0226a40064f3f253197b2d20a8256acba05fbd6b015eb01a63abe4d8059ac86f0c2a73d567b14cfc9c825b1012556ea66642e5092cfe9b4acdd816b2c4d7e10798598d75016aff87a29bdcf14fafdd5e7665e6e223c29718f1e1687b94b10139254718d01f24166980aac5bafcd8ade89b126d20ed7629adb9e4e02d187d2048016d6c5e036102d26d6f5672e2a0819f763995fed3ef0964e73e8b68d6ab8a8eb7813f554585cdcc7b621627757374a6970402f88bcd38a289813b5403eb470a3aaa7b4c60e747cef6c45397898adb328b4c67088abfa97515fd6dfa62b57d8699e6a7de3a6f3cbd1fa5db2113f2fd812d4360c0a25a720e0db2f278d7864eeaa33ca2b7d4e4f9c2a09b66c992c232824870b11977be3eb5b4cbc5b88542f353ebed5d5e06af45774a459bea066028d0818cb61a1e67846f210e8eb93d422f2725d7308f6acd2d5f5bd08de2dc7cff3710ddfe0deddddc874e345d6b923cb15560fa08719b28b95de35fb85494bfa7dad6fb0ea2472f7b2ec60c0bda8a62242af1464c7d0643ee365b733c148eb7fe759731e397c049047452dc56f36561641d8283c4dc42ca3aa2f76c045426cb06bbb6eed252534de11a4aa9dc10c3be7186f11923d41874804ffc4029eef37b55fbc4b409ebbf61a077e967da60d3a73427eb9514966d196fbceb5247053cebf62a1d8f1adad83e5ac1e259d5634c255dc7756b17414b923a8ab034d035dbea6f19cdfb82b83970b393f48657b40317344858495d6fb5099e172f5802a54a77ad1e9cbf02a55a058828e333b7b2590cea939301a86160aa0b4bc75ab5f9873cc52c2fa5cc8e6b296824be32de3ddb3d7af16dc4de5301e020f6026b650580fd0861a51e6519d04b432cf9d837bdef5d1eb3f55ac07663941c07a1112c2e3ff9089a6de64f697ba19ebc0e622600ec6fcf96cf14b6f4f2cfc0a7003fcd96a332bfda836965f89ed9d32c845fe7a91538042bf2dfcee17669b761c50064d8f961970ca95e4a015a42223a24dc7d326c23b3676931021d5cc2341de73fdacd016536aa518183e885668e46fb76bb2db0c77aadbb4cd46050a5fad63408815ae6c0cbe4db8853930e7444c40beb88d42122e499c43947e39f813fba68581dd13ede59bf94bf41d81f5e7ea4148d42656ac80e46f5349d4d1496c297cece54dba5569e07d6f3c24acbe2b818fec9c39d7fc6176858d25da16364fc08b0250c71001dcfc3722ede561130a5e5b1d813fa488450f44f027c6bc925c29d7295b23e1e183da040ab64deddf7f34d063fca59705f103e71ae65ba3698f0ea8c8c55028deba6d064bd12a4c2df570eeb6d9b6fd3548810c48beb01215837b68c3cb47c58bd02db16f1720610e1987d7dd0eaff3b1d8c9852e5db505538787dad60f10bea6a994a995cd8d266513696ea3e23402e6572b93e266dd6a2b01975b2ffcae1e8b773219c8daf37ae31b03570001945095857bd0dff5c7c178ec4411425da8c5f871eb95dde24f7454009291232b8e17862f63554a955bef18f1b59f65b828f5150f22bc6100f757b6f58a4f19421a0f1032e1372fe351decf66d784ddf0faf77eeefe563eb8a97122708e09f07d90f983456181cdf8e835faf57c53db47d6e71f592eda351a7d671414ea5c12a481b4b08abc0b1e91cd588e933ca97cc295186358b4fd43e3cd0e3aebdbf2d6aca304008ed04a543101484f3c5597a40631c5cdbb63d3f39a5cb5c6485318eb3faa3c977710835e767e59a2cf9399e9a0f2ae843b7fa7ea25f56f1f3f476efd371ed6bba01585f5041dba236f846d6a7d4d672de400622a42f0ca085ec9dd59a98d019ece366015b7f15a165a38545e4d912a6a064f11b5800a6ce39c8e92d916846a012ee77fa6feb71c9895de058fcffca46af1d57c6e891eb257fd606c0b1794346cc0ebd78aa70601b66359cbd72ff1871bcf7f9abd691439231ca7953d6a320c26c88a42eabcf2a2851e16138ace917ede1f3ead76eb7ade1ce536c528029d836703c9822409ecc6d33e90d641605ed61e90082c47433d8b8410232846b69a917adade41231dfa045dfb77dd429dbca4e0fcc6f2373a931552ad987219e4abb90adcff53fbb956ee11ef1f7c740e218bbf727b1b39ab645dd8d6a0f6958e37f7a087229a8e45c95efe2de710344d5ffc9029a661571f514aaf945e3b46207a82b0aff14920db54054d83c68da9a06f19d1cc7fa678351800739d3215620d414203348c7e6f6a855ef36b7765a1e9d42a1395d87c4d33241d2f020381e8c3d1e3fc9684b8e24bf44ab3ef588f69b9351fac9fd9b4b17d22ea1db9bb59cd6b7f860c97a05e90842a8d25672eeaf3e6302a7d125d68243a3147a217af3a3f19e518ad42748943d1da92cfd2849b7e50f7b2928abf2a831c60a2bc5e8daa195c6f6f08ffc8371099"}, @NL80211_ATTR_IE_ASSOC_RESP={0xe6, 0x80, [@peer_mgmt={0x75, 0x6, {0x0, 0x85b, @void, @val=0x4, @void}}, @random={0x9, 0xb4, "206b03fc4b3220f5c2d1167b7d9aad0604f3f114801cb92aa79b505485667d5b53034ada20bebdd8525f8b6173fb925867a187052b034178e6483d1383e4e37d901a4da09cb2cd53dc0691e24fde1df68fbbcf06361bb554bcc57e82db76a464d9a49e3bd9759cbfbf90ca291bcd816aee488db46f6efe352affc7fcf8aefad216fca87dccb239f7bad4eee3ffee6ba2d73845560e1aa75e96ea8d5ba955de9af10e29b4f907007750315965920366dc56cadc80"}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x1, 0x0, {0x50ccd201, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x200, 0x1}}, @cf={0x4, 0x6, {0xff, 0x3, 0x4}}]}, @NL80211_ATTR_BEACON_TAIL={0xd8, 0xf, [@mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x84, 0x1f}}, @gcr_ga={0xbd, 0x6}, @perr={0x84, 0xaf, {0x8, 0xb, [@ext={{}, @device_a, 0xffffff81, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x7, "", 0x3c}, @ext={{}, @device_a, 0x2, @device_b, 0x37}, @not_ext={{}, @device_b, 0x0, "", 0x3a}, @ext={{}, @broadcast, 0x3, @broadcast, 0x2a}, @not_ext={{}, @broadcast, 0x9, "", 0x16}, @ext={{}, @device_b, 0x5, @device_b, 0x2a}, @not_ext={{}, @device_a, 0x77bc}, @not_ext={{}, @broadcast, 0x480, "", 0x21}, @ext={{}, @broadcast, 0x400, @device_a, 0x31}, @not_ext={{}, @broadcast, 0xea3d, "", 0x17}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x1, 0x7f, 0x20}}, @ibss={0x6, 0x2, 0x80}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0x1, 0x80, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x101, 0x1, 0x0]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x99, 0xf, [@fast_bss_trans={0x37, 0x85, {0x5, 0x3, "f518f5a7ab8f8e75457c128cb7f75188", "0699c50f700cb2f2440ae6155b47b12c6d1dcc54743ca307ee312e75c1f5ee32", "1a6925041d21d8c92faea26ff04ca66eb33f72510c9321c5e4ae1f1cfa8f7e7d", [{0x4, 0x18, "634925d3863b3c4f013b2ddae7b7de3d3573440454b3ef9a"}, {0x1, 0x10, "2cba91dedb165567431e4bcc35c6c4fb"}, {0x2, 0x5, "41d9bbacd5"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x143, 0x7f, [@random={0x8, 0x7c, "107c9c19f6cd8d2e5d7ab0f7dc3046221cd46c80a053554c4655c1257de628cf5f9c915eff8768199164cc63a4ca3126b91d7a0889a6e68521e6b8af2f36b34f0471e331bcd3642314c0ba859521167959b9d85e0ab373fecc467b8a1126c06ece6a55a0836448b79905d8a2433a0fc35c1a4cd61e5f67e63255b13b"}, @chsw_timing={0x68, 0x4, {0x3, 0xfff}}, @chsw_timing={0x68, 0x4, {0x5, 0x9}}, @random_vendor={0xdd, 0x4b, "0f1240fbbf39644beb3f72db1d6d61d9b217011ede1956eb37fec3af722af2de7af308899ffdf8c7844ba785c3be65eda0b1915c8e9d7b5f2259e80232fd4f03fff601623725e4f52abee0"}, @preq={0x82, 0x41, @ext={{0x1, 0x1}, 0xc1, 0x3f, 0xffffffff, @device_a, 0xfff, @broadcast, 0x7fffffff, 0x5, 0x3, [{{0x1}, @device_a, 0x100}, {{0x1, 0x0, 0x1}, @device_b, 0x6}, {{}, @device_b, 0x80000001}]}}, @ht={0x2d, 0x1a, {0x8, 0x3, 0x4, 0x0, {0x7, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x80, 0x20}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x16f, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @initial, {0xb, 0xe45}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb80, @random=0x17, 0x40c0, @void, @void, @val={0x3, 0x1, 0x8c}, @val={0x4, 0x6, {0x6, 0x0, 0x66, 0x51d}}, @val={0x6, 0x2, 0x100}, @val={0x5, 0xc2, {0xe5, 0x5e, 0x7, "012f4281245c549ac0d906bffe625449cdb0c2ce7feeaf3234c23563663d54d9c6745afa02557d13fb565d215de0e86e791e6bb68ff8d6276f5cc6787b535adfad5877cdab631b09c9aab3a4d8ddae2a7a186152bdcc108403967b384950e4501cca1a8f2302fbac37c5f8b822ee7a5c4e6f978103377b80bc221b4b6d788a929f6004ced1c75ed7e977046ec6b06dac2e34ad89e9032d2728a9d557c0128fa1010f746d076d2db403db4a15ceeaaca062e8ae99d120107d610e21d729a277"}}, @val={0x25, 0x3, {0x0, 0x7c, 0x9}}, @void, @val={0x3c, 0x4, {0x0, 0x5, 0x8c, 0x24}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x0, 0x0, {0x4, 0x88, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x2}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf8, 0x3f, 0x6, 0x1}}, [{0xdd, 0x37, "1370ef9e2ca18611b3dfbb2b7996c7b20ef81e1cf1633cd0742bd0619cab8674113b930f3bee894a793b110daf963879f55575fbc63672"}]}}]]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CSA_IES={0x944, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x7, 0xbc, 0x3, 0x3, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x1, 0xffff, 0x0, 0x8, 0x101, 0x81, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x1000, 0x92b, 0x20]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x104, 0x7f, [@peer_mgmt={0x75, 0x6, {0x0, 0x7f, @void, @val=0x20, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x0, 0x5, @device_b, 0x5, 0xff, 0x1000}}, @random_vendor={0xdd, 0x44, "e5253c79b57b04d65bf08df4a3b653350418801357a1b8cdf780713b30ed9243abbf10cfe048a975a1d06414b4fea5743e678ac3928fd617b356e435af917b9e137ea4ab"}, @channel_switch={0x25, 0x3, {0x0, 0xc9}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0x8, 0x3f}}, @fast_bss_trans={0x37, 0x86, {0xc, 0x2, "6e82a437d7894a24c54a4bce02e70900", "a48f95eca60cbae9f5f22defb4edaa4c36b76265c978f2059be642303113c8b0", "5247168e015815c5f6ca329475942f310b7f08537f989b62f3b960284f4b46af", [{0x4, 0xd, "9f61904e638bf407ad31df3a31"}, {0x4, 0x23, "1b7d7ca721111ca1f148695d6d8a4d23dd41f4aa5fc1e79fd256eacce3bdba0e29aa16"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x1b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7f, 0x3, "380d5dadd379d0a2f4693db8ce7c8597ec0e7f431fdb668db55706d4cc38f54e3110c30489478e5d9c73ca034fe779739427b3a897e762fbdb988503f11bc3b06e18768956826b0fbb3a5d5f4bf9192707c3977f54421a4d491c4f20ee8178d52fcd80cdb24c6073a4a1a16d26d679af86f3c7cf64467721254d53"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x46, 0x3, "7e44e9395efdb5f8d92e10b69df7498a115c22fcf2744db49651fc048f09cbb109e0243e07788abe882c49cf3ede64c4345034150663112bf4729e41aaf4b65f382c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "8a358f3f5cd523941c394ab173e3ff05af910a0bc83824aaa884df0b143e6fe7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb7, 0x3, "59fd20649ff34e1d796624be80bd79ad179362b13343893e977659efa4005fb928b36cda14dceeb4a2c110a189831a7acbf381580d5909d050756188b17bd280c8ff99cc605d47faa68a4374705c1d38b8c7108f962b782f834e7400a84da009d94f446bcbd8fe5e78bed337728346b556eb426a09cceac31bc2e6255ea93f1e84976e32c6b785fdbf1aee1c4f1b212433865cae025da656a1caead67f515881e4c50270a0a15b59e369bbbb80dec634cafd97"}]}, @NL80211_ATTR_IE={0x5c, 0x2a, [@measure_req={0x26, 0x4e, {0x98, 0x80, 0x4, "bdc576f46c65a4dd9137e6914cf5be2c42523b88bb99a3fb89f616546723b4f105549f9b419e300c7e62f869f1325b137ed4ca92482ee9b0765f633c0d415f0316e4f22711d1d2894f7a15"}}, @cf={0x4, 0x6, {0x7b, 0x5, 0x4d, 0x100}}]}, @NL80211_ATTR_PROBE_RESP={0x5f2, 0x91, "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"}]]}]}, 0x2b0c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xdf) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r3) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000100)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) [ 423.626224][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.634046][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.641993][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.650612][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.659619][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.667297][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) r2 = socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES64], 0x6f) 19:55:22 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8807e007a00010003200800a50a1b000800ff7f05022c008149ef0400800202ff030202040002026a070202000610030102000001000003000000010000000f0404000100018002bc04004b0401000c1f0500020400000000000d060800050080ae000009000cf70500010100800507fa040005005000"/131], 0x83) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9302500210001000d08080001002c0a060000000c3f05001f20060007032008000900050006000200"], 0x2a) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2}, @l2cap_cid_signaling={{}, [@l2cap_conn_rsp={{0x3, 0x7f}, {0x1000, 0x8001, 0x0, 0xfff8}}, @l2cap_disconn_req={{0x6, 0x3}, {0x6}}, @l2cap_info_req={{0xa, 0xdf}, {0x1c}}, @l2cap_create_chan_rsp={{0xd, 0x1}, {0x5, 0x8, 0xfe00, 0x401}}, @l2cap_move_chan_req={{0xe, 0x80}, {0x80, 0x2}}, @l2cap_conf_req={{0x4, 0x1f}, {0x63ad, 0x6, [@l2cap_conf_efs={0x6, 0x0, {0x7f, 0x2, 0x3, 0xfffffffe, 0xfffffff8, 0x10000}}, @l2cap_conf_ews]}}]}}, 0x1) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x1, 0x8, 0x2b6, 0x5}}}}, 0x15) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 423.675103][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.682882][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.697275][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.705065][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.712785][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x4, 0x488502) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x1, 0x8}, {0x8, 0x3, 0x4, 0x4}}}}, 0x15) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x5, 0x7, 0x31, 0x8, 0x2, 0x3e, 0xfffffffd, 0x185, 0x40, 0x3b6, 0x2, 0xffff, 0x38, 0x2, 0x3, 0x2, 0xffff}, [{0x71aa60a0cf43bd48, 0x1, 0x0, 0xfffffffffffffc34, 0x7fff, 0x2, 0xfffffffffffffffc, 0x3ff}], "3d6fee0db37d858355bf323c631817dbbaad4c87", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x6}}}, 0xd) [ 423.724519][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.732278][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.740291][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.748022][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.756598][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.764329][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket(0x2, 0x2, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r2, 0x719, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000000300)={0x110, r2, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x40000}, {0x6}, {0x8}}]}, 0x110}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40840}, 0x20000001) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 423.772298][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.780087][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.787879][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.795550][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.803286][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.810987][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.819067][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.826736][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.834438][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.842184][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.857091][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.864830][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8807e007a00010003200800a50a1b000800ff7f05022c008149ef0400800202ff030202040002026a070202000610030102000001000003000000010000000f0404000100018002bc04004b0401000c1f0500020400000000000d060800050080ae000009000cf70500010100800507fa040005005000"/131], 0x83) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9302500210001000d08080001002c0a060000000c3f05001f20060007032008000900050006000200"], 0x2a) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9302500210001000d08080001002c0a060000000c3f05001f20060007032008000900050006000200"], 0x2a) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2}, @l2cap_cid_signaling={{}, [@l2cap_conn_rsp={{0x3, 0x7f}, {0x1000, 0x8001, 0x0, 0xfff8}}, @l2cap_disconn_req={{0x6, 0x3}, {0x6}}, @l2cap_info_req={{0xa, 0xdf}, {0x1c}}, @l2cap_create_chan_rsp={{0xd, 0x1}, {0x5, 0x8, 0xfe00, 0x401}}, @l2cap_move_chan_req={{0xe, 0x80}, {0x80, 0x2}}, @l2cap_conf_req={{0x4, 0x1f}, {0x63ad, 0x6, [@l2cap_conf_efs={0x6, 0x0, {0x7f, 0x2, 0x3, 0xfffffffe, 0xfffffff8, 0x10000}}, @l2cap_conf_ews]}}]}}, 0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x1, 0x8, 0x2b6, 0x5}}}}, 0x15) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 19:55:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(0x0, 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 423.872542][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.880268][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.887021][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 423.887963][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.888002][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.888041][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.918933][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f125f19c03d65252cc21306b35248e9776ca6f909d8644c4b28bf47e69d5c41cf1"], 0xdf) [ 423.926712][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.934636][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.942525][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.950270][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.960006][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.967743][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x4, 0x488502) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x1, 0x8}, {0x8, 0x3, 0x4, 0x4}}}}, 0x15) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x5, 0x7, 0x31, 0x8, 0x2, 0x3e, 0xfffffffd, 0x185, 0x40, 0x3b6, 0x2, 0xffff, 0x38, 0x2, 0x3, 0x2, 0xffff}, [{0x71aa60a0cf43bd48, 0x1, 0x0, 0xfffffffffffffc34, 0x7fff, 0x2, 0xfffffffffffffffc, 0x3ff}], "3d6fee0db37d858355bf323c631817dbbaad4c87", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98c) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x6}}}, 0xd) [ 423.975405][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.983143][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.991047][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 423.998798][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.006461][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.014183][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.021905][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.029621][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.037299][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.045048][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.052795][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.061369][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.070239][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000327bd7800fddbdf330a0000000cc6000200000000000e091c0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x6b}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="b4d2b2ac8206"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000054}, 0xc000) init_module(&(0x7f0000000140)='\xff\xff\xff\xff\xff\xff', 0x6, &(0x7f0000000180)='}^,\x00') init_module(&(0x7f0000000100)='\xff\xff\xff\xff\xff\xff', 0x6, &(0x7f00000001c0)='}^,\x00') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3c925c416b1f04aca6e515425236e93b8b4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) 19:55:22 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "789ced024e0ff33da6004fe272c4c10e", 0x3f}}}, 0x1a) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc8, 0xfff, 0x5}}}}, 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x69}, @l2cap_cid_signaling={{0x65}, [@l2cap_conn_rsp={{0x3, 0x4e, 0x8}, {0x8, 0x5, 0x64, 0x1}}, @l2cap_conf_req={{0x4, 0x0, 0x21}, {0x100, 0x8f, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x8, 0x8, 0x5, 0x0, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x5d, 0x2, 0x4, 0x4, 0xfffb}}, @l2cap_conf_mtu={0x1, 0x2, 0x400}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_conf_req={{0x4, 0x5, 0x16}, {0x0, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x0, 0x0, 0x4, 0x3}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}}, @l2cap_conn_req={{0x2, 0x40, 0x4}, {0x5633, 0x6}}, @l2cap_info_req={{0xa, 0x20, 0x2}, {0xcca}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x10}}]}}, 0x6e) 19:55:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 424.077979][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.085834][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.093730][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.101453][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.109457][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.117128][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f125f19c03d65252cc21306b35248e9776ca6f909d8644c4b28bf47e69d5c41cf1"], 0xdf) [ 424.124888][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.132762][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.135626][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 424.140478][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.140522][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.140559][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.140604][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x4, 0x488502) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x1, 0x8}, {0x8, 0x3, 0x4, 0x4}}}}, 0x15) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x5, 0x7, 0x31, 0x8, 0x2, 0x3e, 0xfffffffd, 0x185, 0x40, 0x3b6, 0x2, 0xffff, 0x38, 0x2, 0x3, 0x2, 0xffff}, [{0x71aa60a0cf43bd48, 0x1, 0x0, 0xfffffffffffffc34, 0x7fff, 0x2, 0xfffffffffffffffc, 0x3ff}], "3d6fee0db37d858355bf323c631817dbbaad4c87", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98c) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x6}}}, 0xd) [ 424.140641][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.140678][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.140715][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.203288][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.211225][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.218960][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.226817][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.235575][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.243337][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.251064][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.258801][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.267454][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:22 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000327bd7800fddbdf330a0000000cc6000200000000000e091c0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x6b}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="b4d2b2ac8206"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000054}, 0xc000) init_module(&(0x7f0000000140)='\xff\xff\xff\xff\xff\xff', 0x6, &(0x7f0000000180)='}^,\x00') (async) init_module(&(0x7f0000000140)='\xff\xff\xff\xff\xff\xff', 0x6, &(0x7f0000000180)='}^,\x00') init_module(&(0x7f0000000100)='\xff\xff\xff\xff\xff\xff', 0x6, &(0x7f00000001c0)='}^,\x00') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3c925c416b1f04aca6e515425236e93b8b4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) 19:55:22 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "789ced024e0ff33da6004fe272c4c10e", 0x3f}}}, 0x1a) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc8, 0xfff, 0x5}}}}, 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x69}, @l2cap_cid_signaling={{0x65}, [@l2cap_conn_rsp={{0x3, 0x4e, 0x8}, {0x8, 0x5, 0x64, 0x1}}, @l2cap_conf_req={{0x4, 0x0, 0x21}, {0x100, 0x8f, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x8, 0x8, 0x5, 0x0, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x5d, 0x2, 0x4, 0x4, 0xfffb}}, @l2cap_conf_mtu={0x1, 0x2, 0x400}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_conf_req={{0x4, 0x5, 0x16}, {0x0, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x0, 0x0, 0x4, 0x3}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}}, @l2cap_conn_req={{0x2, 0x40, 0x4}, {0x5633, 0x6}}, @l2cap_info_req={{0xa, 0x20, 0x2}, {0xcca}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x10}}]}}, 0x6e) [ 424.275128][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.282980][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.290901][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.298761][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.306437][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.314330][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.322100][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 424.329913][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.336368][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 424.338634][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.352987][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.360719][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.369500][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f125f19c03d65252cc21306b35248e9776ca6f909d8644c4b28bf47e69d5c41cf1"], 0xdf) 19:55:23 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x2, 0x9}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x39}, {0x2, 0x9, [{0xc9, 0x3}, {0xc9, 0x7, 0x8}, {0xc9, 0x6, 0x1f}, {0xc9, 0xff4, 0x3}, {0xc8, 0x7ff, 0x401}, {0xc8, 0x7fff, 0x1}, {0xc8, 0x2, 0x1e3d}, {0xc9, 0x7176, 0x401}, {0xc8, 0x4, 0x2af}]}}}, 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "c3073b1f7a0c"}, 0xa) [ 424.377166][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.384915][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.392783][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.400510][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.408262][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.415932][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.423875][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.431624][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.439572][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.447250][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.455141][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.462908][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.472488][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000327bd7800fddbdf330a0000000cc6000200000000000e091c0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x6b}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="b4d2b2ac8206"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000054}, 0xc000) init_module(&(0x7f0000000140)='\xff\xff\xff\xff\xff\xff', 0x6, &(0x7f0000000180)='}^,\x00') (async) init_module(&(0x7f0000000100)='\xff\xff\xff\xff\xff\xff', 0x6, &(0x7f00000001c0)='}^,\x00') (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3c925c416b1f04aca6e515425236e93b8b4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) [ 424.480291][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 424.488018][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.495684][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 424.503431][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 424.511634][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.519366][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:23 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "789ced024e0ff33da6004fe272c4c10e", 0x3f}}}, 0x1a) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc8, 0xfff, 0x5}}}}, 0x10) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x69}, @l2cap_cid_signaling={{0x65}, [@l2cap_conn_rsp={{0x3, 0x4e, 0x8}, {0x8, 0x5, 0x64, 0x1}}, @l2cap_conf_req={{0x4, 0x0, 0x21}, {0x100, 0x8f, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x8, 0x8, 0x5, 0x0, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x5d, 0x2, 0x4, 0x4, 0xfffb}}, @l2cap_conf_mtu={0x1, 0x2, 0x400}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_conf_req={{0x4, 0x5, 0x16}, {0x0, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x0, 0x0, 0x4, 0x3}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}}, @l2cap_conn_req={{0x2, 0x40, 0x4}, {0x5633, 0x6}}, @l2cap_info_req={{0xa, 0x20, 0x2}, {0xcca}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x10}}]}}, 0x6e) [ 424.527043][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 424.534957][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.542677][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.550388][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 424.558823][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.566644][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 19:55:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0400011000000000005a14ce0d234a6d3834e15ab2ede4a9eee2c8293940be2090bfcf82a6103bf36ab2c0afc8c53881cb2c8980d81a04c821d61cab68"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x36, &(0x7f0000000480)={0xe, 0x6}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRESDEC=r4], &(0x7f0000000280)='./cgroup.n\x9bet/syz1\x00', 0x13, 0x2) openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f00000002c0)=0x1, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000002840)={{0x0, 0x20, 0x9, 0x0, 0x40, 0x8997, 0x5, 0x1, 0xa7b, 0x2, 0x7, 0x9, 0x3f, 0x5, 0xfffffffffffffff8}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "7464fbe08eb369"}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000000000000a004e2200000004fe8000000000000000000000040000aa040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e2400010001fc02000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001ff01000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000006fe800000000000000000000000000016ff0100"/528], 0x210) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000055c40)={0x0, 0x0, "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", "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"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000002c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000380)) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000003840)={r6, 0x1ff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9200a0006eb860013b30200fdff"], 0xf) 19:55:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:23 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x2, 0x9}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x39}, {0x2, 0x9, [{0xc9, 0x3}, {0xc9, 0x7, 0x8}, {0xc9, 0x6, 0x1f}, {0xc9, 0xff4, 0x3}, {0xc8, 0x7ff, 0x401}, {0xc8, 0x7fff, 0x1}, {0xc8, 0x2, 0x1e3d}, {0xc9, 0x7176, 0x401}, {0xc8, 0x4, 0x2af}]}}}, 0x3c) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "c3073b1f7a0c"}, 0xa) [ 424.577515][ T5130] Bluetooth: hci2: command 0x0409 tx timeout [ 424.585981][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 424.594006][ T5130] Bluetooth: hci0: wrong event for mode 0 19:55:23 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) [ 424.627193][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 424.647744][ T5118] Bluetooth: hci4: command 0x0409 tx timeout [ 424.653247][ T5130] Bluetooth: hci0: wrong event for mode 0 19:55:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:23 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) 19:55:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) [ 424.678902][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 424.711880][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 424.719913][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 19:55:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x2, 0x9}}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x39}, {0x2, 0x9, [{0xc9, 0x3}, {0xc9, 0x7, 0x8}, {0xc9, 0x6, 0x1f}, {0xc9, 0xff4, 0x3}, {0xc8, 0x7ff, 0x401}, {0xc8, 0x7fff, 0x1}, {0xc8, 0x2, 0x1e3d}, {0xc9, 0x7176, 0x401}, {0xc8, 0x4, 0x2af}]}}}, 0x3c) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6}, "c3073b1f7a0c"}, 0xa) (rerun: 32) 19:55:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:23 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) 19:55:23 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4e}, @l2cap_cid_signaling={{0x4a}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x79, 0x4}, {0xfff, 0xff}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x2, 0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x3}}, @l2cap_create_chan_req={{0xc, 0xc, 0x5}, {0x8001, 0x9, 0x6a}}, @l2cap_create_chan_req={{0xc, 0x7e, 0x5}, {0x934, 0xfff8, 0xe9}}, @l2cap_create_chan_rsp={{0xd, 0x81, 0x8}, {0x0, 0x800, 0x8000, 0xe8}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x629, 0x2f}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x5, 0x5d}}]}}, 0x53) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x81, 0x8}, {0x8, 0x9, 0x3, 0x2000}}}}, 0x15) [ 424.838961][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.844831][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 424.852945][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.862882][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.869733][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.877668][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.878202][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 424.883661][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.903105][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.909132][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.914889][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.920731][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.926461][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.932217][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.938030][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.943771][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.952277][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.952716][ T5118] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 424.958108][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.958172][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.978065][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.984340][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.990148][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 424.995876][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.001639][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.007627][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.013374][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.019168][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.025064][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.030857][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.036583][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.042347][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.048129][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.053855][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.059691][ T5130] Bluetooth: hci0: wrong event for mode 0 [ 425.065418][ T5130] Bluetooth: hci0: wrong event for mode 0 19:55:24 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(0xffffffffffffffff, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4e}, @l2cap_cid_signaling={{0x4a}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x79, 0x4}, {0xfff, 0xff}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x2, 0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x3}}, @l2cap_create_chan_req={{0xc, 0xc, 0x5}, {0x8001, 0x9, 0x6a}}, @l2cap_create_chan_req={{0xc, 0x7e, 0x5}, {0x934, 0xfff8, 0xe9}}, @l2cap_create_chan_rsp={{0xd, 0x81, 0x8}, {0x0, 0x800, 0x8000, 0xe8}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x629, 0x2f}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x5, 0x5d}}]}}, 0x53) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x81, 0x8}, {0x8, 0x9, 0x3, 0x2000}}}}, 0x15) 19:55:24 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffff0400000000000000000010f4cc51312fb1ec60805eca09a73ab186ac7d789c40eae41f52154b898c7e8a42350000c3d58ecfd8d6aa07172d1b41914ab7a2fb55ccbec5cb262df1a1673817f92bba792cf4309c6fea0e53e74ae737d730150aa543b5e7876625b8fc7067af248a017f38101be181752bcd7c2093d87dbf068baf1598ec560e0c923950c95c0583e640a77821568428cd6fc1698e2a44c8034b0bd6801e681d1162ec471be80239c8f81049e6af56af51ba48e123ce60f9cc26ab70b153743fd2e8481ba2bf714171f14547b9e5f7c7a23eedbb2d8ea7625575728c9b"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4d}, "82c0a6c652fc2edb369e5caeeac67759c748c773211b1d3ffea28d5fd24377998df3607745c4d9a37c6d2ab250804aa58a3bc93d40c91bea4a9dca7fa3a850b34a5c55cfb9a5afaed252421a8b"}, 0x51) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 19:55:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0400011000000000005a14ce0d234a6d3834e15ab2ede4a9eee2c8293940be2090bfcf82a6103bf36ab2c0afc8c53881cb2c8980d81a04c821d61cab68"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x36, &(0x7f0000000480)={0xe, 0x6}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xd}, 0x1c) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) (async) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRESDEC=r4], &(0x7f0000000280)='./cgroup.n\x9bet/syz1\x00', 0x13, 0x2) openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f00000002c0)=0x1, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000002840)={{0x0, 0x20, 0x9, 0x0, 0x40, 0x8997, 0x5, 0x1, 0xa7b, 0x2, 0x7, 0x9, 0x3f, 0x5, 0xfffffffffffffff8}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "7464fbe08eb369"}) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000000000000a004e2200000004fe8000000000000000000000040000aa040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e2400010001fc02000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001ff01000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000006fe800000000000000000000000000016ff0100"/528], 0x210) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000055c40)={0x0, 0x0, "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", "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"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000002c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000380)) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000003840)={r6, 0x1ff}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9200a0006eb860013b30200fdff"], 0xf) 19:55:24 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x39}, "a0f17be7a025752d414eb783be5c6651718bfaa1760b98bb9daaa985c5141f9eac60a3df632fb0029ee14748514760feb5dd0bf4b9161e871b"}, 0x3d) socket$packet(0x11, 0x2, 0x300) 19:55:24 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffff0400000000000000000010f4cc51312fb1ec60805eca09a73ab186ac7d789c40eae41f52154b898c7e8a42350000c3d58ecfd8d6aa07172d1b41914ab7a2fb55ccbec5cb262df1a1673817f92bba792cf4309c6fea0e53e74ae737d730150aa543b5e7876625b8fc7067af248a017f38101be181752bcd7c2093d87dbf068baf1598ec560e0c923950c95c0583e640a77821568428cd6fc1698e2a44c8034b0bd6801e681d1162ec471be80239c8f81049e6af56af51ba48e123ce60f9cc26ab70b153743fd2e8481ba2bf714171f14547b9e5f7c7a23eedbb2d8ea7625575728c9b"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4d}, "82c0a6c652fc2edb369e5caeeac67759c748c773211b1d3ffea28d5fd24377998df3607745c4d9a37c6d2ab250804aa58a3bc93d40c91bea4a9dca7fa3a850b34a5c55cfb9a5afaed252421a8b"}, 0x51) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffff0400000000000000000010f4cc51312fb1ec60805eca09a73ab186ac7d789c40eae41f52154b898c7e8a42350000c3d58ecfd8d6aa07172d1b41914ab7a2fb55ccbec5cb262df1a1673817f92bba792cf4309c6fea0e53e74ae737d730150aa543b5e7876625b8fc7067af248a017f38101be181752bcd7c2093d87dbf068baf1598ec560e0c923950c95c0583e640a77821568428cd6fc1698e2a44c8034b0bd6801e681d1162ec471be80239c8f81049e6af56af51ba48e123ce60f9cc26ab70b153743fd2e8481ba2bf714171f14547b9e5f7c7a23eedbb2d8ea7625575728c9b"], 0x20) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4d}, "82c0a6c652fc2edb369e5caeeac67759c748c773211b1d3ffea28d5fd24377998df3607745c4d9a37c6d2ab250804aa58a3bc93d40c91bea4a9dca7fa3a850b34a5c55cfb9a5afaed252421a8b"}, 0x51) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) (async) 19:55:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4e}, @l2cap_cid_signaling={{0x4a}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x79, 0x4}, {0xfff, 0xff}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x2, 0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x3}}, @l2cap_create_chan_req={{0xc, 0xc, 0x5}, {0x8001, 0x9, 0x6a}}, @l2cap_create_chan_req={{0xc, 0x7e, 0x5}, {0x934, 0xfff8, 0xe9}}, @l2cap_create_chan_rsp={{0xd, 0x81, 0x8}, {0x0, 0x800, 0x8000, 0xe8}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x629, 0x2f}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x5, 0x5d}}]}}, 0x53) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x81, 0x8}, {0x8, 0x9, 0x3, 0x2000}}}}, 0x15) [ 425.539253][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 425.547243][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9, 0xc5}}}, 0x7) 19:55:24 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) r0 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0400011000000000005a14ce0d234a6d3834e15ab2ede4a9eee2c8293940be2090bfcf82a6103bf36ab2c0afc8c53881cb2c8980d81a04c821d61cab68"], 0x7) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x36, &(0x7f0000000480)={0xe, 0x6}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xd}, 0x1c) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) (async) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYRES64=r3, @ANYRESDEC=r4], &(0x7f0000000280)='./cgroup.n\x9bet/syz1\x00', 0x13, 0x2) openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f00000002c0)=0x1, 0x4) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000002840)={{0x0, 0x20, 0x9, 0x0, 0x40, 0x8997, 0x5, 0x1, 0xa7b, 0x2, 0x7, 0x9, 0x3f, 0x5, 0xfffffffffffffff8}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000745c0)={0x5af, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "7464fbe08eb369"}) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000000000000a004e2200000004fe8000000000000000000000040000aa040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e2400010001fc02000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001ff01000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000006fe800000000000000000000000000016ff0100"/528], 0x210) (async, rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000055c40)={0x0, 0x0, "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", "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"}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000002c0)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000380)) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000003840)={r6, 0x1ff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9200a0006eb860013b30200fdff"], 0xf) (rerun: 32) [ 425.587598][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 425.595216][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 425.611810][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 425.622232][ T5130] Bluetooth: hci2: ACL packet for unknown connection handle 200 19:55:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(0x0, 0x0) 19:55:24 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x102) write(0xffffffffffffffff, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:24 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aaaaaaaaaa000000008e70c30000ffffffff0400000000000000000010f4cc51312fb1ec60805eca09a73ab186ac7d789c40eae41f52154b898c7e8a42350000c3d58ecfd8d6aa07172d1b41914ab7a2fb55ccbec5cb262df1a1673817f92bba792cf4309c6fea0e53e74ae737d730150aa543b5e7876625b8fc7067af248a017f38101be181752bcd7c2093d87dbf068baf1598ec560e0c923950c95c0583e640a77821568428cd6fc1698e2a44c8034b0bd6801e681d1162ec471be80239c8f81049e6af56af51ba48e123ce60f9cc26ab70b153743fd2e8481ba2bf714171f14547b9e5f7c7a23eedbb2d8ea7625575728c9b"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4d}, "82c0a6c652fc2edb369e5caeeac67759c748c773211b1d3ffea28d5fd24377998df3607745c4d9a37c6d2ab250804aa58a3bc93d40c91bea4a9dca7fa3a850b34a5c55cfb9a5afaed252421a8b"}, 0x51) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 425.708051][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 425.714916][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 425.722163][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 425.730384][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 425.737772][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 425.744628][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 425.751667][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 19:55:24 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x39}, "a0f17be7a025752d414eb783be5c6651718bfaa1760b98bb9daaa985c5141f9eac60a3df632fb0029ee14748514760feb5dd0bf4b9161e871b"}, 0x3d) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x39}, "a0f17be7a025752d414eb783be5c6651718bfaa1760b98bb9daaa985c5141f9eac60a3df632fb0029ee14748514760feb5dd0bf4b9161e871b"}, 0x3d) socket$packet(0x11, 0x2, 0x300) 19:55:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x4) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 425.758583][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 425.765611][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 425.777393][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 425.788236][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 425.795025][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 19:55:24 executing program 4: write(0xffffffffffffffff, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:24 executing program 0: clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{r0, r1+10000000}, {r2, r3+10000000}}, 0x0) [ 425.803003][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 425.810323][ T5130] Bluetooth: hci1: unexpected event for opcode 0x1001 19:55:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="c880000000000500062e000003000008"], 0x43) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x1f}}}}, 0xf) 19:55:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(0x0, 0x0) 19:55:24 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c99fbfa91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca93a3096ba33c84231ea74a072f9bd62d31120fe785069ea0728eaa2ef2bdc05978efe2812310697a1f19fc27829cdc72f4dce218c3942b0bf2622dad3ea36b9b7be79aeae027da4939db08df4bbaffd9d17e558dca0a02b4ee37f5b1e1d4e4e5b984b1b4fa55fc68c4bdb562881211aa69d9bb9219c5e7bb03853d23aa451d367b067a9497819752d6a11e1da3d4ecced3b9cc9700bedcf04ae7f0c83f149d029ee93ab3e5e8b439c36694fb7ec9133f521a94947986213457e6b6c7386ecf36ba27853a405c6e8f3d631cbe572b3ae921f6792974789689b3d460427320361e9b8f00000000000000"], 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x39}, "a0f17be7a025752d414eb783be5c6651718bfaa1760b98bb9daaa985c5141f9eac60a3df632fb0029ee14748514760feb5dd0bf4b9161e871b"}, 0x3d) (async) socket$packet(0x11, 0x2, 0x300) 19:55:24 executing program 0: clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{r0, r1+10000000}, {r2, r3+10000000}}, 0x0) 19:55:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x4) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 19:55:24 executing program 0: clock_gettime(0x3, &(0x7f00000000c0)) (async) clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{r0, r1+10000000}, {r2, r3+10000000}}, 0x0) 19:55:24 executing program 4: write(0xffffffffffffffff, &(0x7f0000000080)="14000000b45769400e789e7e000a0149f3", 0x11) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(0x0, 0x0) 19:55:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="c880000000000500062e000003000008"], 0x43) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x1f}}}}, 0xf) 19:55:24 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x102) [ 425.967367][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:24 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8, @ANYRESHEX, @ANYRES64], 0x6f) 19:55:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x75) 19:55:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0xc5}}}, 0x7) 19:55:24 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="c880000000000500062e000003000008"], 0x43) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x1f}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="c880000000000500062e000003000008"], 0x43) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x1f}}}}, 0xf) (async) 19:55:24 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX], 0xdf) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c800075752a9edab009fb45440a026f97f85bb1b4806c0ece852"], 0x1b) [ 426.076143][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:24 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x102) 19:55:24 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x102) 19:55:24 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x6f) 19:55:24 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX], 0xdf) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c800075752a9edab009fb45440a026f97f85bb1b4806c0ece852"], 0x1b) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c800075752a9edab009fb45440a026f97f85bb1b4806c0ece852"], 0x1b) 19:55:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0xc5}}}, 0x7) 19:55:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x75) 19:55:24 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa27afaaaa000000008e70c30000ffffffffffff00000030e3f39ae200788348eb0d000088870000"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x8, 0xa}, {0x6, 0x7ff, 0xfff, 0xc5f, 0x7}}}}, 0x17) [ 426.147609][ T5130] Bluetooth: hci2: unexpected event 0x07 length: 114 < 255 [ 426.177836][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.185763][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:24 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x6f) 19:55:24 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa27afaaaa000000008e70c30000ffffffffffff00000030e3f39ae200788348eb0d000088870000"], 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x8, 0xa}, {0x6, 0x7ff, 0xfff, 0xc5f, 0x7}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x8, 0xa}, {0x6, 0x7ff, 0xfff, 0xc5f, 0x7}}}}, 0x17) [ 426.258768][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.286659][ T5130] Bluetooth: hci2: unexpected event 0x07 length: 114 < 255 19:55:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0xc5}}}, 0x7) 19:55:24 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX], 0xdf) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX], 0xdf) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c800075752a9edab009fb45440a026f97f85bb1b4806c0ece852"], 0x1b) 19:55:24 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x75) 19:55:24 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x6f) 19:55:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c944efa120c590fe6141a771be01040000ef0620127baf935bb7126fbfbc1a742556081997cb12f390537345402445000000000000000000002144cd576316475ff499d4000000"], 0x25) 19:55:25 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa27afaaaa000000008e70c30000ffffffffffff00000030e3f39ae200788348eb0d000088870000"], 0x20) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x8, 0xa}, {0x6, 0x7ff, 0xfff, 0xc5f, 0x7}}}}, 0x17) (rerun: 32) [ 426.301841][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.310685][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0x0, 0xc5}}}, 0x7) 19:55:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0x0, 0xc5}}}, 0x7) 19:55:25 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8, @ANYRESHEX], 0x6f) 19:55:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000000) [ 426.418109][ T5130] Bluetooth: hci2: unexpected event 0x07 length: 114 < 255 [ 426.458685][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.466398][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.474452][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.482470][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.490267][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.498992][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.506659][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.519280][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.526955][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.534792][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.542538][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.544245][ T5118] Bluetooth: hci3: ACL packet for unknown connection handle 1225 19:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x5, 0x0, 0x8, 0xff}}]}}, 0x15) 19:55:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0x0, 0xc5}}}, 0x7) [ 426.550233][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550273][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550310][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550347][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550386][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550423][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:25 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) 19:55:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c944efa120c590fe6141a771be01040000ef0620127baf935bb7126fbfbc1a742556081997cb12f390537345402445000000000000000000002144cd576316475ff499d4000000"], 0x25) [ 426.550460][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550497][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550532][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550567][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550609][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550645][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.550681][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000000) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32, @ANYRES8], 0x6f) [ 426.550719][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.652802][ T5118] Bluetooth: hci2: command 0x0409 tx timeout [ 426.662550][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.681447][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.689354][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.697040][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x5, 0x0, 0x8, 0xff}}]}}, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x5, 0x0, 0x8, 0xff}}]}}, 0x15) (async) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212", @ANYRES32], 0x6f) [ 426.704847][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.712604][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.721213][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.729055][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.736734][ T5130] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.737664][ T5118] Bluetooth: hci4: command 0x0409 tx timeout 19:55:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9}}}, 0x7) 19:55:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000000) (async) 19:55:25 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x102) (async) [ 426.803266][ T5118] Bluetooth: hci3: ACL packet for unknown connection handle 1225 [ 426.838425][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c944efa120c590fe6141a771be01040000ef0620127baf935bb7126fbfbc1a742556081997cb12f390537345402445000000000000000000002144cd576316475ff499d4000000"], 0x25) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e327d6e7d791d62292166ec76e38a22fbc3cb6835b9fbc334eb7e8ccf5c2e768af05cf88d2a49c05d13a788148da847569ea650aa488b97141829c76598cdcee9f62c070000009be6bfeb4060c212"], 0x6f) 19:55:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9}}}, 0x7) [ 426.846222][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x5, 0x0, 0x8, 0xff}}]}}, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x5, 0x0, 0x8, 0xff}}]}}, 0x15) (async) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x6f) 19:55:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) fcntl$setsig(r0, 0xa, 0x3e) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0\x00') write$UHID_CREATE2(r2, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x5c, 0x8, 0x9, 0x24d, 0x6f0, 0xffff, "1b1cbb587303a6fab88a8fcef84736f69bff73fab2601f0e7e030d4923cfd59bcad5f65130b9c9708094d2f774bdf46df33329eb2bd7c3d8b33d03c99099251b25d9b91f0488fd9cf3a6443ac0441661ceb8a6bed52db69f390a7256"}}, 0x174) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x16c}, @l2cap_cid_signaling={{0x168}, [@l2cap_conf_req={{0x4, 0xcd, 0x38}, {0x1f, 0x2, [@l2cap_conf_rfc={0x4, 0x9, {0x7, 0xff, 0x2, 0x1, 0x4, 0x401}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x6, 0x2, 0x10001, 0x8a}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x5, 0xff, 0xf457, 0xddd4}}, @l2cap_conf_mtu={0x1, 0x2, 0x20}, @l2cap_conf_mtu={0x1, 0x2, 0x1000}, @l2cap_conf_flushto={0x2, 0x2, 0xf6}]}}, @l2cap_conf_rsp={{0x5, 0x7, 0x11}, {0x800, 0x5, 0x400, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x3f, 0x0, 0x7ff, 0xffff, 0x5}}]}}, @l2cap_create_chan_rsp={{0xd, 0x22, 0x8}, {0xbcaa, 0x9, 0x3, 0x1}}, @l2cap_info_rsp={{0xb, 0x3e, 0xfb}, {0xa81, 0x0, "ef193fa656afb3e4a142bf4283b1e3e6746c9996e7f83007cd4d5fc987d7533bc0307d9122b531010274d12f410e872eef439abddda3ad291ab1a70b2a3f325bf522994cbfe6f517c104bf893f4f38f438f13085eefe09da603f231450ab36015a880f3771ce600769bb63a9be8fffd7cadac28c80ad3afbeefe848d6db34e2566b547d6c42b451bf26c4503e6eb9b9ccec65f919035e7759506d03d70478047d54c053f56d7ad4cd356f06aba5f34fbd79194ab5425d7b484a0c59ee263edacd3ce3c667f38d928b5d0bbf61bb8653e8c80d83e34c7ab58692c340ce68a9ccc7fe241ff13ac105fec196de6c305dab8d2092c87582f6a"}}, @l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x100, 0x3ff, 0x7, 0x7fff}}]}}, 0x171) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x6f) 19:55:25 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='./file0\x00') ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x253e50, 0x38d668}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:25 executing program 2: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xffff8000, 0x7ca]) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x102) 19:55:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x80000001, 0x10001) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4e}, "b94161bf200f4a594d678c60b9a8c40eea8ac3033afde6213604e1dd3216a4c90cd61f72bf8ae1d2e95f374fe24d7d6f39940e6fc3a62d105d98233e1c75aed914664b27541c57034b759bc838af"}, 0x52) [ 426.954311][ T5118] Bluetooth: hci3: ACL packet for unknown connection handle 1225 [ 426.979432][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 426.987223][ T5118] Bluetooth: hci0: ACL packet for unknown connection handle 200 19:55:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc9}}}, 0x7) 19:55:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) fcntl$setsig(r0, 0xa, 0x3e) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0\x00') (async) write$UHID_CREATE2(r2, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x5c, 0x8, 0x9, 0x24d, 0x6f0, 0xffff, "1b1cbb587303a6fab88a8fcef84736f69bff73fab2601f0e7e030d4923cfd59bcad5f65130b9c9708094d2f774bdf46df33329eb2bd7c3d8b33d03c99099251b25d9b91f0488fd9cf3a6443ac0441661ceb8a6bed52db69f390a7256"}}, 0x174) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x16c}, @l2cap_cid_signaling={{0x168}, [@l2cap_conf_req={{0x4, 0xcd, 0x38}, {0x1f, 0x2, [@l2cap_conf_rfc={0x4, 0x9, {0x7, 0xff, 0x2, 0x1, 0x4, 0x401}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x6, 0x2, 0x10001, 0x8a}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x5, 0xff, 0xf457, 0xddd4}}, @l2cap_conf_mtu={0x1, 0x2, 0x20}, @l2cap_conf_mtu={0x1, 0x2, 0x1000}, @l2cap_conf_flushto={0x2, 0x2, 0xf6}]}}, @l2cap_conf_rsp={{0x5, 0x7, 0x11}, {0x800, 0x5, 0x400, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x3f, 0x0, 0x7ff, 0xffff, 0x5}}]}}, @l2cap_create_chan_rsp={{0xd, 0x22, 0x8}, {0xbcaa, 0x9, 0x3, 0x1}}, @l2cap_info_rsp={{0xb, 0x3e, 0xfb}, {0xa81, 0x0, "ef193fa656afb3e4a142bf4283b1e3e6746c9996e7f83007cd4d5fc987d7533bc0307d9122b531010274d12f410e872eef439abddda3ad291ab1a70b2a3f325bf522994cbfe6f517c104bf893f4f38f438f13085eefe09da603f231450ab36015a880f3771ce600769bb63a9be8fffd7cadac28c80ad3afbeefe848d6db34e2566b547d6c42b451bf26c4503e6eb9b9ccec65f919035e7759506d03d70478047d54c053f56d7ad4cd356f06aba5f34fbd79194ab5425d7b484a0c59ee263edacd3ce3c667f38d928b5d0bbf61bb8653e8c80d83e34c7ab58692c340ce68a9ccc7fe241ff13ac105fec196de6c305dab8d2092c87582f6a"}}, @l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x100, 0x3ff, 0x7, 0x7fff}}]}}, 0x171) [ 427.021780][ T5118] Bluetooth: Unexpected start frame (len 218) [ 427.037692][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:25 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='./file0\x00') (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x253e50, 0x38d668}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) 19:55:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x80000001, 0x10001) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4e}, "b94161bf200f4a594d678c60b9a8c40eea8ac3033afde6213604e1dd3216a4c90cd61f72bf8ae1d2e95f374fe24d7d6f39940e6fc3a62d105d98233e1c75aed914664b27541c57034b759bc838af"}, 0x52) 19:55:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) fcntl$setsig(r0, 0xa, 0x3e) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0\x00') write$UHID_CREATE2(r2, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x5c, 0x8, 0x9, 0x24d, 0x6f0, 0xffff, "1b1cbb587303a6fab88a8fcef84736f69bff73fab2601f0e7e030d4923cfd59bcad5f65130b9c9708094d2f774bdf46df33329eb2bd7c3d8b33d03c99099251b25d9b91f0488fd9cf3a6443ac0441661ceb8a6bed52db69f390a7256"}}, 0x174) (async) write$UHID_CREATE2(r2, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x5c, 0x8, 0x9, 0x24d, 0x6f0, 0xffff, "1b1cbb587303a6fab88a8fcef84736f69bff73fab2601f0e7e030d4923cfd59bcad5f65130b9c9708094d2f774bdf46df33329eb2bd7c3d8b33d03c99099251b25d9b91f0488fd9cf3a6443ac0441661ceb8a6bed52db69f390a7256"}}, 0x174) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x16c}, @l2cap_cid_signaling={{0x168}, [@l2cap_conf_req={{0x4, 0xcd, 0x38}, {0x1f, 0x2, [@l2cap_conf_rfc={0x4, 0x9, {0x7, 0xff, 0x2, 0x1, 0x4, 0x401}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x6, 0x2, 0x10001, 0x8a}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x5, 0xff, 0xf457, 0xddd4}}, @l2cap_conf_mtu={0x1, 0x2, 0x20}, @l2cap_conf_mtu={0x1, 0x2, 0x1000}, @l2cap_conf_flushto={0x2, 0x2, 0xf6}]}}, @l2cap_conf_rsp={{0x5, 0x7, 0x11}, {0x800, 0x5, 0x400, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x3f, 0x0, 0x7ff, 0xffff, 0x5}}]}}, @l2cap_create_chan_rsp={{0xd, 0x22, 0x8}, {0xbcaa, 0x9, 0x3, 0x1}}, @l2cap_info_rsp={{0xb, 0x3e, 0xfb}, {0xa81, 0x0, "ef193fa656afb3e4a142bf4283b1e3e6746c9996e7f83007cd4d5fc987d7533bc0307d9122b531010274d12f410e872eef439abddda3ad291ab1a70b2a3f325bf522994cbfe6f517c104bf893f4f38f438f13085eefe09da603f231450ab36015a880f3771ce600769bb63a9be8fffd7cadac28c80ad3afbeefe848d6db34e2566b547d6c42b451bf26c4503e6eb9b9ccec65f919035e7759506d03d70478047d54c053f56d7ad4cd356f06aba5f34fbd79194ab5425d7b484a0c59ee263edacd3ce3c667f38d928b5d0bbf61bb8653e8c80d83e34c7ab58692c340ce68a9ccc7fe241ff13ac105fec196de6c305dab8d2092c87582f6a"}}, @l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x100, 0x3ff, 0x7, 0x7fff}}]}}, 0x171) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x6f) [ 427.073196][ T5118] bt_err_ratelimited: 55 callbacks suppressed [ 427.073211][ T5118] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 427.084135][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:25 executing program 2: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xffff8000, 0x7ca]) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x102) 19:55:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x80000001, 0x10001) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4e}, "b94161bf200f4a594d678c60b9a8c40eea8ac3033afde6213604e1dd3216a4c90cd61f72bf8ae1d2e95f374fe24d7d6f39940e6fc3a62d105d98233e1c75aed914664b27541c57034b759bc838af"}, 0x52) 19:55:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(0xffffffffffffffff, &(0x7f0000000e40)="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"/422, 0x1a6) r1 = socket(0x10, 0x80000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@mcast1, 0xd}) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r4, @ANYBLOB="000327bd7800fddbdf370a0000000cfcc2c387000000000e091c00044941e88cc82a96d6d5e144067f2a14f715ee17ce06a34b7532a35333fe980d5135e3793b0146af588c45dd76de3969166cb87cf137098ba343cd6a3adbb69069209958265822af5ffcc7784fb02656af68c2972760c1c9a2a581af518b68d4120ed4757e46d15f8b1de3c734203edfa0b24259902e9c8521f8f60033e06593f5dde946d01a2d1223aa69"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1b8, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8000, @private2, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @private1, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffdd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4050}, 0x58041) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x380000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="20002cbd7000ffdbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0c009900040000007f0000000600360026000000060036000a0000000600360032000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x804) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f4000000e27e0614cdc51527b29f6ab1780872a8b8fa5efbcf95ec6e7438f2750471216674bea8f961c6e85a6dbecc399eafe6c98d226aecb8f2ed45140e40463bdd4d02fe63e2c8ece0cd070f489eaedf66fad5cd6e4057ed5b3968c17b332709947412c0eebf9733f4d942a365ec25e4442b0f3ac31c535731c18572a11cf44dca4b3f28ebfec770edd96433cbb2a5dfd064503a83ccb83300"/169, @ANYRES16=r2, @ANYBLOB="100025bd7000fbdbdf251a000000d80022801c0000800800020008000000080002000700000008000400070000001c000080080004000400d6742a9a225187f40000080002000500000008000200090000001c00008008000700000400000800030009000000080004000700000044000080080003000200000008000500070000000800060008000000080007002f05000008000700060000000800020009000000080001000500000008000600010000003c00008008000200bcb200000800040002000000080001000100000008000400ff010000080001008e04000008000100040000000800040007000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xffffffff) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="000000f3ff00968a780b3625ff5e96315d1eb57dc427a7e079b35ea40cd1adba7be12ad74294fb2dc4fda9163f42f365d94a7c5396ece4a1e490b20028ecba7e3569dca516c9cf1d862e60c7f38a2129d5f6e2f47271d5f6b4ab1ffee43286fc35b3c0195a88636418021b90b26d22aa378931b8a08024fc969b92b3820eeee1c4ac3c59ea00795c74d6ccb09d7329cbfb3caf5f547a5c15384c9eb34628eb136969ffbcab3655197976ea7167c8cbe750041dac732ba45326d3bdbafa4c8a5c2a88a2a14b90353af6d9eac8eda28e2408fd027500"/224], 0xdf) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0xff, 0xc8, 0x3, 0x60, 0x1, 0x8}}}, 0xc) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c000000110000042bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000400c40800003800128008000100677265002c000280050009001f00000008001400e200000005001600010000000600001b0024004a5ee110bd616194bd36965cbae47b229b935d06b8b7870008001c00", @ANYRES32=r10, @ANYBLOB="050010000200000008002000ffff0000"], 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 19:55:25 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='./file0\x00') ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x253e50, 0x38d668}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) [ 427.169990][ T5118] Bluetooth: hci1: ACL packet for unknown connection handle 200 19:55:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0x0, 0xc5}}}, 0x7) 19:55:25 executing program 2: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xffff8000, 0x7ca]) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x102) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xffff8000, 0x7ca]) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x102) (async) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0x6f) 19:55:25 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0x6f) 19:55:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(0xffffffffffffffff, &(0x7f0000000e40)="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"/422, 0x1a6) (async) r1 = socket(0x10, 0x80000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@mcast1, 0xd}) (async) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r4, @ANYBLOB="000327bd7800fddbdf370a0000000cfcc2c387000000000e091c00044941e88cc82a96d6d5e144067f2a14f715ee17ce06a34b7532a35333fe980d5135e3793b0146af588c45dd76de3969166cb87cf137098ba343cd6a3adbb69069209958265822af5ffcc7784fb02656af68c2972760c1c9a2a581af518b68d4120ed4757e46d15f8b1de3c734203edfa0b24259902e9c8521f8f60033e06593f5dde946d01a2d1223aa69"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1b8, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8000, @private2, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @private1, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffdd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4050}, 0x58041) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) (async) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x380000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="20002cbd7000ffdbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0c009900040000007f0000000600360026000000060036000a0000000600360032000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x804) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f4000000e27e0614cdc51527b29f6ab1780872a8b8fa5efbcf95ec6e7438f2750471216674bea8f961c6e85a6dbecc399eafe6c98d226aecb8f2ed45140e40463bdd4d02fe63e2c8ece0cd070f489eaedf66fad5cd6e4057ed5b3968c17b332709947412c0eebf9733f4d942a365ec25e4442b0f3ac31c535731c18572a11cf44dca4b3f28ebfec770edd96433cbb2a5dfd064503a83ccb83300"/169, @ANYRES16=r2, @ANYBLOB="100025bd7000fbdbdf251a000000d80022801c0000800800020008000000080002000700000008000400070000001c000080080004000400d6742a9a225187f40000080002000500000008000200090000001c00008008000700000400000800030009000000080004000700000044000080080003000200000008000500070000000800060008000000080007002f05000008000700060000000800020009000000080001000500000008000600010000003c00008008000200bcb200000800040002000000080001000100000008000400ff010000080001008e04000008000100040000000800040007000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xffffffff) (async) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="000000f3ff00968a780b3625ff5e96315d1eb57dc427a7e079b35ea40cd1adba7be12ad74294fb2dc4fda9163f42f365d94a7c5396ece4a1e490b20028ecba7e3569dca516c9cf1d862e60c7f38a2129d5f6e2f47271d5f6b4ab1ffee43286fc35b3c0195a88636418021b90b26d22aa378931b8a08024fc969b92b3820eeee1c4ac3c59ea00795c74d6ccb09d7329cbfb3caf5f547a5c15384c9eb34628eb136969ffbcab3655197976ea7167c8cbe750041dac732ba45326d3bdbafa4c8a5c2a88a2a14b90353af6d9eac8eda28e2408fd027500"/224], 0xdf) (async) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0xff, 0xc8, 0x3, 0x60, 0x1, 0x8}}}, 0xc) (async) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c000000110000042bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000400c40800003800128008000100677265002c000280050009001f00000008001400e200000005001600010000000600001b0024004a5ee110bd616194bd36965cbae47b229b935d06b8b7870008001c00", @ANYRES32=r10, @ANYBLOB="050010000200000008002000ffff0000"], 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 19:55:25 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b32f5004ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d62b312ef907b573c335198e0dc925c416b1f05425236e93b82912c7f0712fe5da95dad5d587c0b0fc05f859b62deed6334ab2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac1386f0fcc5b81ea631cc92e92802183400000000"], 0x102) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x5e3d235603b2f05d}, 0x2) [ 427.199885][ T5118] Bluetooth: hci0: SCO packet for unknown connection handle 201 19:55:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x7f, 0x800}}}}, 0x11) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4b}, "eb3a3416775eb91858233c53edbbb23aa50eff2e49a17644af6eb8da3dde5293aa7a1a3bc793a7fee30e048c9d194e694dfe89c1db81bc4dd7fea3c3f2bd6f633d59f8fd1225194eef46ba"}, 0x4f) 19:55:26 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x75) 19:55:26 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0x6f) 19:55:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b32f5004ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d62b312ef907b573c335198e0dc925c416b1f05425236e93b82912c7f0712fe5da95dad5d587c0b0fc05f859b62deed6334ab2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac1386f0fcc5b81ea631cc92e92802183400000000"], 0x102) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x5e3d235603b2f05d}, 0x2) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x5e3d235603b2f05d}, 0x2) 19:55:26 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x75) [ 427.314663][ T5118] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 427.438025][ T5118] Bluetooth: hci4: unexpected event 0x07 length: 114 < 255 [ 427.446492][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(0xffffffffffffffff, &(0x7f0000000e40)="2100030000004f030e789e7e27286d000a2749f37d698d6e0e35101a8f79815c29bd871b60eec6802641fff87cdfbef6f9b556b378f1c2f7d640d851900082ff830be9b4cc454cba576f982483fbe43a17476d9fa7df5ce2a1ba9661ed2f950b5831465ddbe391a269bf3551235759bc12600d43943f5b82c84375b83a20bfee62b7ccf998a1ad3e12b001e4505b4ed09480884cf3fac0430a97f8fb209dabc0ed8315efb5b339ae4450b41028c25e54191e2392f44966715d765e5e6fd43e690b3377cde7f0db4d4bb89301b200ddc479f258b5142f4bf728624933592e0ecd362d29b4fefbf23a4092d19edc81bb67ce95d139c4f013744fd5c48cdc3d2242c88b5a978a4c29021730d258870001b1c679c40e44cbe80476060adde13bdcedb37fb9a1785cecf8cc8e4cabbed530c974e60ec777105cc7e2d69bb14c1740d29be4e18d9b2a7978c47707f7cf5d131018b44c51e8bb5fda295b8909d9a8a64c1b21d2c7b0ab87d75a211456dce4ccdbe885eba11ddfd6a34f86018a80597ba972d6ef72f502b627ea4f5c0cff00"/422, 0x1a6) r1 = socket(0x10, 0x80000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@mcast1, 0xd}) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@mcast1, 0xd}) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001880), 0xc, &(0x7f0000001dc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r4, @ANYBLOB="000327bd7800fddbdf370a0000000cfcc2c387000000000e091c00044941e88cc82a96d6d5e144067f2a14f715ee17ce06a34b7532a35333fe980d5135e3793b0146af588c45dd76de3969166cb87cf137098ba343cd6a3adbb69069209958265822af5ffcc7784fb02656af68c2972760c1c9a2a581af518b68d4120ed4757e46d15f8b1de3c734203edfa0b24259902e9c8521f8f60033e06593f5dde946d01a2d1223aa69"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1b8, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8000, @private2, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @private1, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffdd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4050}, 0x58041) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x380000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="20002cbd7000ffdbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0c009900040000007f0000000600360026000000060036000a0000000600360032000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x804) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="39c68b980881d62981df9478b7000000ee7d2d011533ce374c99fe0dbc95f4a25b53ad85f0bf3d918309e2cf17900a0d3a87f198597f5d2150b99cc998f8525c961c016818963576b74ac2800d04bde3bd9388c179a60d8d2991f082018572ef240c2ee2c685ae823f6385d72d149e57c811699e3c35a1b3145d3d0e81a762bd1942ddea2d118ac3de8f0aa10545b86e7b3a5aeecb0e5115ef9e1459f2e0b2438c83cb45ecc6a2c80ba1686fff1fe9b9c71969dd74412d0d5fffb556dfd590d4e4ed29f4f897d166ca5841083b985a7b4480291ba4e39b348a0288f8b7ceed521fbab00f9c38548ceb155a2bcfce218a40f3b8830b7665807ae9697c5745c554232355e1338be63876266b3af9a50e3ce864480f1f627c15322755953fea45c832e3041320a71e926d7ca3330bc663fa864202c1226320f9dfc432e2a23d7c4c31bd046d090fade47e39ecbe54a06249e1ab", @ANYRES16=r3, @ANYBLOB="20002cbd7000ffdbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0c009900040000007f0000000600360026000000060036000a0000000600360032000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x804) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f4000000e27e0614cdc51527b29f6ab1780872a8b8fa5efbcf95ec6e7438f2750471216674bea8f961c6e85a6dbecc399eafe6c98d226aecb8f2ed45140e40463bdd4d02fe63e2c8ece0cd070f489eaedf66fad5cd6e4057ed5b3968c17b332709947412c0eebf9733f4d942a365ec25e4442b0f3ac31c535731c18572a11cf44dca4b3f28ebfec770edd96433cbb2a5dfd064503a83ccb83300"/169, @ANYRES16=r2, @ANYBLOB="100025bd7000fbdbdf251a000000d80022801c0000800800020008000000080002000700000008000400070000001c000080080004000400d6742a9a225187f40000080002000500000008000200090000001c00008008000700000400000800030009000000080004000700000044000080080003000200000008000500070000000800060008000000080007002f05000008000700060000000800020009000000080001000500000008000600010000003c00008008000200bcb200000800040002000000080001000100000008000400ff010000080001008e04000008000100040000000800040007000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xffffffff) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="000000f3ff00968a780b3625ff5e96315d1eb57dc427a7e079b35ea40cd1adba7be12ad74294fb2dc4fda9163f42f365d94a7c5396ece4a1e490b20028ecba7e3569dca516c9cf1d862e60c7f38a2129d5f6e2f47271d5f6b4ab1ffee43286fc35b3c0195a88636418021b90b26d22aa378931b8a08024fc969b92b3820eeee1c4ac3c59ea00795c74d6ccb09d7329cbfb3caf5f547a5c15384c9eb34628eb136969ffbcab3655197976ea7167c8cbe750041dac732ba45326d3bdbafa4c8a5c2a88a2a14b90353af6d9eac8eda28e2408fd027500"/224], 0xdf) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0xff, 0xc8, 0x3, 0x60, 0x1, 0x8}}}, 0xc) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c000000110000042bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000400c40800003800128008000100677265002c000280050009001f00000008001400e200000005001600010000000600001b0024004a5ee110bd616194bd36965cbae47b229b935d06b8b7870008001c00", @ANYRES32=r10, @ANYBLOB="050010000200000008002000ffff0000"], 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c000000110000042bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000400c40800003800128008000100677265002c000280050009001f00000008001400e200000005001600010000000600001b0024004a5ee110bd616194bd36965cbae47b229b935d06b8b7870008001c00", @ANYRES32=r10, @ANYBLOB="050010000200000008002000ffff0000"], 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 19:55:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x7f, 0x800}}}}, 0x11) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4b}, "eb3a3416775eb91858233c53edbbb23aa50eff2e49a17644af6eb8da3dde5293aa7a1a3bc793a7fee30e048c9d194e694dfe89c1db81bc4dd7fea3c3f2bd6f633d59f8fd1225194eef46ba"}, 0x4f) 19:55:26 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e"], 0x6f) 19:55:26 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b32f5004ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d62b312ef907b573c335198e0dc925c416b1f05425236e93b82912c7f0712fe5da95dad5d587c0b0fc05f859b62deed6334ab2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac1386f0fcc5b81ea631cc92e92802183400000000"], 0x102) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x5e3d235603b2f05d}, 0x2) 19:55:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x4, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x6b8359c7c777086d, 0xf25, 0x7}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}, 0x1, 0x40030000000007}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000001) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) [ 427.473572][ T5130] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 427.547999][ T5130] Bluetooth: hci4: unexpected event 0x07 length: 114 < 255 19:55:26 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x102) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x7f, 0x800}}}}, 0x11) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4b}, "eb3a3416775eb91858233c53edbbb23aa50eff2e49a17644af6eb8da3dde5293aa7a1a3bc793a7fee30e048c9d194e694dfe89c1db81bc4dd7fea3c3f2bd6f633d59f8fd1225194eef46ba"}, 0x4f) 19:55:26 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xfe, @none, "f55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d8366409f3dd5a37a513035c54eb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"}}}, 0x75) [ 427.591608][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:26 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf2, 0x0, 0x41c}}}, 0x7) [ 427.599573][ T5130] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 427.644740][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.648325][ T5118] bt_warn_ratelimited: 52 callbacks suppressed [ 427.648337][ T5118] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 [ 427.656230][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.683006][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:26 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0417fff0687f36d390fedfa064285e180fdb2c29133c11555269b256726625908900a925f267d1c33a0e7491d95e62634f20585fb89ce10100000000000000fc469605532f705f21d9d9de67a1d46e"], 0x6f) [ 427.691617][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.700130][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.728729][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.736603][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.745371][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.753705][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.763160][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.770446][ T5118] Bluetooth: hci4: unexpected event 0x07 length: 114 < 255 [ 427.771425][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.785761][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:26 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xce346709d12ec58a, 0x11, r0, 0x36d6f000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0xe2, 0x81, 0x3f}}}, 0xc) r1 = getuid() setresuid(0xee00, r1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) r3 = getuid() setresuid(0xee00, r3, 0x0) lstat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() setresuid(0xee00, r5, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000640)=@usbdevfs_driver={0xb7000000, 0xc, &(0x7f0000001140)="56257c4b2580cc6efefb2bdaf202f6bc0bf8a77d33f5f67404f8aaa3f5231bfffed5efe79f5dda1fbc98d48c45e1ca0835539292243182594761498219ee1e86b0b9c33d0c17a99dbda93a39031426ddece2c7fc15866f98ba4946897ee812b31af65fdd59b0170abe484c796bbc83ff8a48421040e261d028d4af51846f1bd30ee257fc556f8de07e59e7165baac2de0cb48e32bf872dfcc4e44a0dead07cb1cdc28bb6753db72f1f79ba913958ac7c4b3d59893b2c91124d5d8a946824"}) statx(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x400, 0x100, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r9) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket(0x840000000002, 0x3, 0x100) connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000fc0)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x44e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)="70e2263e1e136eaa5f0e28ee10fc0d6afabb08cf2cc43dfc17906489ba88137f2a24008d260aa8a80ef900deb3821df04bb2099cefc167918b03de342b4cf041fc8e", 0x42}, {&(0x7f0000000500)="7bfbf4d892350d4dc48d8e2f5bc27a9dfc1a451fcad422214254d79f2731a584c7712c6340b9de836e3ca74ea152919e1524adb97289299d4b5da076eba01f4a34690fa14f12e8f8da21f994c77ce2ed6edaac12e21a86dbedf7ac0993c859f198459c75ebb6ecd521de2132e14446671d2506b7ba0591636545547bdaf42072f1467151491468d06e36bebd4e6a5a2d180aa35f0ba7e5a8197cc4cac42d36238748de75f8abfabd4fb02d1c2259069cd77e1ae693ed36a1188d13d263f831132aefc4a38a9a0d6cbe60dab84d624655e6daf516a82612774373a3d453684b339fd5cdb3fd1d43", 0xe7}, {&(0x7f0000000700)="d00c7cc30aebb5f551b69a04be93fec33a535bce954299d8ef840c873bc4e1c5e47768c23f1b7b7a23cab01c1a864af9ce8ed452715b696916628a8a1e37c44c80bc6d46755b47cb2ee36adbd7404e64064534cf76806b4142c2bc48dc6682", 0x5f}, {&(0x7f0000000100)="392071c56edaa60e38ed257aaff50f536a52a23729d8362821c583382e366f2ff30ee1910cc99983b6dbe63b", 0x2c}, {&(0x7f00000007c0)="e5a7297e5ff96f4a4a2cea9bfe553f0b4fb68664d2a2969ffe3fa090254daf9ec158018c8a9b666c6869287481cfb401ac118667fdebbb7d7508b069176db6db3c8a804c7a7edb7967efcb9bbf1aa37e8d5409ee689384186dca", 0x5a}, {&(0x7f0000000780)}], 0x6, 0x0, 0x0, 0x80}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000280)}, {&(0x7f0000000840)="c56c8fd04df817da759ad000ba525316ee63d0ebd097929213c1f79b1ae00f905fe05033c2af6041510ec27b04a5484e96cabeada7613fc8eb6c515f81ae88b19677c1e91ddac36fc237998715062d9727dc6ea1cb88067fa763043d64f8ff8774059ae0ef2cbfab99ee5ebfe3dba9dec9a825df1603d1712916708f771c6fc92b9415", 0x83}, {&(0x7f0000000e80)="725a66bf0ef1759e7159f8f7f550e0e65297df8cf451f019e0b5d315cba00f6425f5e0de2a335ef268063e4166a6e00000f5f694e47ad784b99d9d3380aac5caf2dd9db20330533c7da711ec236d22f07601ac379fff444eb76d9991cfbf2278914e2d0dc9870adeb985d28cf9be29947a79609a69ea6a0b0a7f71409cc9b814f3f7650cbb030647fa895a", 0x8b}, {&(0x7f0000001040)="5ffa8a6ccd0daefb73c92f8d10ec3843a4478484fb9c5ead41dab0ff2ccd41af9a7bd338e95df11232e65ea18d8fcd103f7f062c733fa638d33d0b52db91e2bafbea4bfc2e780318bc77b5e9a8cc66ac18e2618843558bcebdf0c970d472878f1db4d534cc08c3d668df67273215e3cdaf8be3be21acf1b6045f77be5921be5202050c7ca1b374ba62c47f0ea698e6ceb455828989ef247641f55b494d54dcb48526320b4dec4a47980cfc04b9cf53fffd7a9a975ad80cc632f222105444c9e078bf9c42e5ae4d80b11064ce31030b2b71d0cd576c6a2c7073397c3a2a3ac71f2d163653259efd17", 0xe8}, {&(0x7f0000000c00)="edaca03955d207c941a7463f070bb343783682b029adb47f1fe4a83cff7dfa81b64f70f82a48fbcc38f3c482c5d2078bc18dae0f170c72d86fc8d5df78f475bcb6b2e1628fe4900a6c75bb2d6f57a7dcbe2c0000fefff6c0e92112942901573e5d1bb3d392f07cfce23232c4f6d324daf9dbf2b6cc44b68ae217bd913484c1a5c5e9e53aab518000a6b75e563ba4abc6b1e288370ce771337e696c02c27d8adbd7202a6eb82cca8581607a434febac58f2fbd346d1f969298ab2feee453c5307bdd50888f232e68da0393e6e4749dc4ce980e0867d75dbac975abade9df833f6", 0xe0}, {&(0x7f0000000d00)="1d", 0x1}, {&(0x7f0000000a00)="2fe205d37dd2922e1efdcc40fdb14c1848b93bf3d41e4fc1063c20bc6d7c16697a4224e060c65695fb0a77adcad5bd29d303f299d992af39552d7f35b7ded065363b244054aec76631636715e75ca53bb2332d3192ab800fae079c86fc1645452c5425811e429fe87edf6e001e0edc076d28df52032a4a2aff60a321a4", 0x7d}, {&(0x7f0000000b00)="9cabdfe6f1f117a025a274c560672581c1a9b341e90b393f2aafd1581136dd363b1727f5aaad3d02b2cea498b29788ec29bcd2ce56cbdb17270e0175df5920de9f3ce0f47c5cbd3919ecf93376878f346483b5a17ba0c968ba7c64a22039a1ca33f8e2f56795b4adfbf22bc223eb4c5079e5afc8f4f0e6bf52ef680f70135e346ddeb3112c7fa78aa848afe64f998587fe1fee64d33ece00a8fb192802891461672f64b3dda64e732c741ed5634246393a1cc603f7346b6263a264", 0xbb}, {&(0x7f0000000480)="0f77dfc5da6256c55732a9f847cfb088e58f63b4c59cb68f3fd066777f37d6776b6657762945", 0x26}], 0x9, &(0x7f0000001200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="0000e26b9af250ec4f22006feed30feaa0965e0458a69e5fb5b07151e4b58870f6120dbf612aa81bf48a763e34e36d9791ea15d4e4b7182e58207e91ed5c824df34be200"/81, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="00000805000000", @ANYRESOCT=r0, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYRESHEX, @ANYRES32=r11, @ANYRES32=r6, @ANYBLOB="000000000001fd7333e19706f600"/27, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x4000}}], 0x2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000001340)=ANY=[@ANYBLOB="02000000010005000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040001000000000008000400", @ANYRES32, @ANYBLOB="0800ade24e2118faa2168c21c52b05e4c56d3af1e2e2db9a83132df06adb5c6679eeae19d76307d21c5df05d31ab1a313e05dfef2b4e05bb490c50f59693896d9ae967c3a1c3259fd30ce5bc43747ada51b9b6f6a913a2329dc9a3a17bd3af28ba80ac108cd7238e05efae546a63a3a4bffefa21e0aeb6e148b6ffe644164681fadbf74bbb688a3ea90cef5fdbf44c96ca49bddc74faf3e77504763e49d33a485e534feb44d5e631d117e963d68cfb6c5b55b294a569905fd5b5606ba51415", @ANYRES32=r10, @ANYBLOB="10000200000000002000010000000000"], 0x7c, 0x2) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r14, &(0x7f0000000140)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r14, 0x40182103, &(0x7f0000000200)={r15, 0x3, r0, 0x3ff}) 19:55:26 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) [ 427.787559][ T5118] Bluetooth: hci1: unexpected event for opcode 0x041c [ 427.793471][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.807885][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.815732][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.823583][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.831297][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:26 executing program 3: 19:55:26 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf2, 0x0, 0x41c}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf2, 0x0, 0x41c}}}, 0x7) [ 427.839208][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.847858][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.855532][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.863424][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.872204][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.880082][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.887818][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.895500][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.899026][ T5118] Bluetooth: hci5: unexpected event 0x17 length: 108 > 6 [ 427.903226][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.918008][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.925675][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.933429][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 19:55:26 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04"], 0x6f) 19:55:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x4, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x6b8359c7c777086d, 0xf25, 0x7}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}, 0x1, 0x40030000000007}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}, 0x1, 0x40030000000007}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000001) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) 19:55:26 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c900da00d6"], 0xdf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf2, 0x0, 0x41c}}}, 0x7) [ 427.941189][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.949751][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.957484][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.965163][ T5130] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.980527][ T5130] Bluetooth: hci1: unexpected event for opcode 0x041c [ 427.987578][ T5130] Bluetooth: hci1: unexpected event for opcode 0x041c 19:55:26 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04"], 0x6f) 19:55:26 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407ff00fffffffffffff55c93f48ac00a5f9605c0c9a3c0dac3e65b8f7a07e6bbb434ebe552e8034b5f792b3215824ac6b2a8693499c8706938054f5e9daf56eea791e3abe75a15ccd370ab6fad940a87c5c280c91cb5a91b5b3750bc584d30d83664585809f3dd5a37a513035cffeb1775a45f67e2d6b3dea907b573c335198e0dc925c416b1f04aca6e515425236e93b82912c7f0712fe5dabdf8695c72bab4fb62e0956025087395dad5d587c0b0fc05b2ab039d571ac283474de2f0b22ae010b710798d2e335811a46c7e7bf581e06bf3b133ab826274dd6c249c71c64e4a2ef4ac6e69677eb53f15411386f0fcc5b81ea636df30f21bba21c5f906bc20078661ca"], 0x102) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) (async) 19:55:26 executing program 3: [ 428.020832][ T5130] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 428.052563][ T5130] Bluetooth: hci1: unexpected event for opcode 0x041c 19:55:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000680)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}], [{@seclabel}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, '$'}}, {@subj_type={'subj_type', 0x3d, 'nl80211\x00'}}]}}, 0x0, 0x0, &(0x7f00000007c0)="bb3c488d9bec7aa9089bfc6c3276e197f65f75f7c347142f940467a42abd2e9a836428e258b608a6399614c513f2c7525155d4025106c1dff8da6ea432d711788377447ee9e0bd5d64ebf9de03476b018cd8c43884ca9b29c4d6a9fee5c2cda7d80436ef7c960ec19a51108fd6bf884e87b38c") symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') r5 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x80000000}}, './file0\x00'}) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/197, 0xc5) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02d900da0054"], 0xdf) 19:55:26 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x102) (async) [ 428.162688][ T5130] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 428.210200][ T5130] Bluetooth: hci1: ACL packet for unknown connection handle 217 19:55:27 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xce346709d12ec58a, 0x11, r0, 0x36d6f000) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0xe2, 0x81, 0x3f}}}, 0xc) r1 = getuid() setresuid(0xee00, r1, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) (async) r3 = getuid() setresuid(0xee00, r3, 0x0) lstat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = getuid() setresuid(0xee00, r5, 0x0) (async) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000640)=@usbdevfs_driver={0xb7000000, 0xc, &(0x7f0000001140)="56257c4b2580cc6efefb2bdaf202f6bc0bf8a77d33f5f67404f8aaa3f5231bfffed5efe79f5dda1fbc98d48c45e1ca0835539292243182594761498219ee1e86b0b9c33d0c17a99dbda93a39031426ddece2c7fc15866f98ba4946897ee812b31af65fdd59b0170abe484c796bbc83ff8a48421040e261d028d4af51846f1bd30ee257fc556f8de07e59e7165baac2de0cb48e32bf872dfcc4e44a0dead07cb1cdc28bb6753db72f1f79ba913958ac7c4b3d59893b2c91124d5d8a946824"}) (async) statx(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x400, 0x100, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r9) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r12 = socket(0x840000000002, 0x3, 0x100) connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x0) (async) r13 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r12, &(0x7f0000000fc0)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x44e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)="70e2263e1e136eaa5f0e28ee10fc0d6afabb08cf2cc43dfc17906489ba88137f2a24008d260aa8a80ef900deb3821df04bb2099cefc167918b03de342b4cf041fc8e", 0x42}, {&(0x7f0000000500)="7bfbf4d892350d4dc48d8e2f5bc27a9dfc1a451fcad422214254d79f2731a584c7712c6340b9de836e3ca74ea152919e1524adb97289299d4b5da076eba01f4a34690fa14f12e8f8da21f994c77ce2ed6edaac12e21a86dbedf7ac0993c859f198459c75ebb6ecd521de2132e14446671d2506b7ba0591636545547bdaf42072f1467151491468d06e36bebd4e6a5a2d180aa35f0ba7e5a8197cc4cac42d36238748de75f8abfabd4fb02d1c2259069cd77e1ae693ed36a1188d13d263f831132aefc4a38a9a0d6cbe60dab84d624655e6daf516a82612774373a3d453684b339fd5cdb3fd1d43", 0xe7}, {&(0x7f0000000700)="d00c7cc30aebb5f551b69a04be93fec33a535bce954299d8ef840c873bc4e1c5e47768c23f1b7b7a23cab01c1a864af9ce8ed452715b696916628a8a1e37c44c80bc6d46755b47cb2ee36adbd7404e64064534cf76806b4142c2bc48dc6682", 0x5f}, {&(0x7f0000000100)="392071c56edaa60e38ed257aaff50f536a52a23729d8362821c583382e366f2ff30ee1910cc99983b6dbe63b", 0x2c}, {&(0x7f00000007c0)="e5a7297e5ff96f4a4a2cea9bfe553f0b4fb68664d2a2969ffe3fa090254daf9ec158018c8a9b666c6869287481cfb401ac118667fdebbb7d7508b069176db6db3c8a804c7a7edb7967efcb9bbf1aa37e8d5409ee689384186dca", 0x5a}, {&(0x7f0000000780)}], 0x6, 0x0, 0x0, 0x80}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000280)}, {&(0x7f0000000840)="c56c8fd04df817da759ad000ba525316ee63d0ebd097929213c1f79b1ae00f905fe05033c2af6041510ec27b04a5484e96cabeada7613fc8eb6c515f81ae88b19677c1e91ddac36fc237998715062d9727dc6ea1cb88067fa763043d64f8ff8774059ae0ef2cbfab99ee5ebfe3dba9dec9a825df1603d1712916708f771c6fc92b9415", 0x83}, {&(0x7f0000000e80)="725a66bf0ef1759e7159f8f7f550e0e65297df8cf451f019e0b5d315cba00f6425f5e0de2a335ef268063e4166a6e00000f5f694e47ad784b99d9d3380aac5caf2dd9db20330533c7da711ec236d22f07601ac379fff444eb76d9991cfbf2278914e2d0dc9870adeb985d28cf9be29947a79609a69ea6a0b0a7f71409cc9b814f3f7650cbb030647fa895a", 0x8b}, {&(0x7f0000001040)="5ffa8a6ccd0daefb73c92f8d10ec3843a4478484fb9c5ead41dab0ff2ccd41af9a7bd338e95df11232e65ea18d8fcd103f7f062c733fa638d33d0b52db91e2bafbea4bfc2e780318bc77b5e9a8cc66ac18e2618843558bcebdf0c970d472878f1db4d534cc08c3d668df67273215e3cdaf8be3be21acf1b6045f77be5921be5202050c7ca1b374ba62c47f0ea698e6ceb455828989ef247641f55b494d54dcb48526320b4dec4a47980cfc04b9cf53fffd7a9a975ad80cc632f222105444c9e078bf9c42e5ae4d80b11064ce31030b2b71d0cd576c6a2c7073397c3a2a3ac71f2d163653259efd17", 0xe8}, {&(0x7f0000000c00)="edaca03955d207c941a7463f070bb343783682b029adb47f1fe4a83cff7dfa81b64f70f82a48fbcc38f3c482c5d2078bc18dae0f170c72d86fc8d5df78f475bcb6b2e1628fe4900a6c75bb2d6f57a7dcbe2c0000fefff6c0e92112942901573e5d1bb3d392f07cfce23232c4f6d324daf9dbf2b6cc44b68ae217bd913484c1a5c5e9e53aab518000a6b75e563ba4abc6b1e288370ce771337e696c02c27d8adbd7202a6eb82cca8581607a434febac58f2fbd346d1f969298ab2feee453c5307bdd50888f232e68da0393e6e4749dc4ce980e0867d75dbac975abade9df833f6", 0xe0}, {&(0x7f0000000d00)="1d", 0x1}, {&(0x7f0000000a00)="2fe205d37dd2922e1efdcc40fdb14c1848b93bf3d41e4fc1063c20bc6d7c16697a4224e060c65695fb0a77adcad5bd29d303f299d992af39552d7f35b7ded065363b244054aec76631636715e75ca53bb2332d3192ab800fae079c86fc1645452c5425811e429fe87edf6e001e0edc076d28df52032a4a2aff60a321a4", 0x7d}, {&(0x7f0000000b00)="9cabdfe6f1f117a025a274c560672581c1a9b341e90b393f2aafd1581136dd363b1727f5aaad3d02b2cea498b29788ec29bcd2ce56cbdb17270e0175df5920de9f3ce0f47c5cbd3919ecf93376878f346483b5a17ba0c968ba7c64a22039a1ca33f8e2f56795b4adfbf22bc223eb4c5079e5afc8f4f0e6bf52ef680f70135e346ddeb3112c7fa78aa848afe64f998587fe1fee64d33ece00a8fb192802891461672f64b3dda64e732c741ed5634246393a1cc603f7346b6263a264", 0xbb}, {&(0x7f0000000480)="0f77dfc5da6256c55732a9f847cfb088e58f63b4c59cb68f3fd066777f37d6776b6657762945", 0x26}], 0x9, &(0x7f0000001200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="0000e26b9af250ec4f22006feed30feaa0965e0458a69e5fb5b07151e4b58870f6120dbf612aa81bf48a763e34e36d9791ea15d4e4b7182e58207e91ed5c824df34be200"/81, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="00000805000000", @ANYRESOCT=r0, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYRESHEX, @ANYRES32=r11, @ANYRES32=r6, @ANYBLOB="000000000001fd7333e19706f600"/27, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x4000}}], 0x2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000001340)=ANY=[@ANYBLOB="02000000010005000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040001000000000008000400", @ANYRES32, @ANYBLOB="0800ade24e2118faa2168c21c52b05e4c56d3af1e2e2db9a83132df06adb5c6679eeae19d76307d21c5df05d31ab1a313e05dfef2b4e05bb490c50f59693896d9ae967c3a1c3259fd30ce5bc43747ada51b9b6f6a913a2329dc9a3a17bd3af28ba80ac108cd7238e05efae546a63a3a4bffefa21e0aeb6e148b6ffe644164681fadbf74bbb688a3ea90cef5fdbf44c96ca49bddc74faf3e77504763e49d33a485e534feb44d5e631d117e963d68cfb6c5b55b294a569905fd5b5606ba51415", @ANYRES32=r10, @ANYBLOB="10000200000000002000010000000000"], 0x7c, 0x2) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r14, &(0x7f0000000140)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r14, 0x40182103, &(0x7f0000000200)={r15, 0x3, r0, 0x3ff}) 19:55:27 executing program 3: 19:55:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000140)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) (async, rerun: 64) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000680)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}], [{@seclabel}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, '$'}}, {@subj_type={'subj_type', 0x3d, 'nl80211\x00'}}]}}, 0x0, 0x0, &(0x7f00000007c0)="bb3c488d9bec7aa9089bfc6c3276e197f65f75f7c347142f940467a42abd2e9a836428e258b608a6399614c513f2c7525155d4025106c1dff8da6ea432d711788377447ee9e0bd5d64ebf9de03476b018cd8c43884ca9b29c4d6a9fee5c2cda7d80436ef7c960ec19a51108fd6bf884e87b38c") (async) symlinkat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') (async) r5 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x20) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) write(r5, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x80000000}}, './file0\x00'}) (async, rerun: 64) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/197, 0xc5) (async, rerun: 64) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02d900da0054"], 0xdf) 19:55:27 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04"], 0x6f) 19:55:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x102) 19:55:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x4, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x6b8359c7c777086d, 0xf25, 0x7}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, 0x0, 0x50d, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}, 0x1, 0x40030000000007}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000001) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@fixed, 0x0, 0x0, 0x0, "8e70c3"}, {@none, 0x0, 0x0, 0x0, "308887"}]}}}, 0x20) [ 428.729228][ T5130] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 428.737482][ T5118] Bluetooth: hci2: command 0x0409 tx timeout [ 428.738087][ T5130] Bluetooth: hci1: Injecting HCI hardware error event [ 428.752370][ T5118] Bluetooth: hci1: hardware error 0x00 [ 428.777424][ T5118] ================================================================== [ 428.785526][ T5118] BUG: KASAN: null-ptr-deref in ida_free+0x218/0x2e0 [ 428.792209][ T5118] Read of size 8 at addr 0000000000000010 by task kworker/u5:4/5118 [ 428.800171][ T5118] [ 428.802476][ T5118] CPU: 0 PID: 5118 Comm: kworker/u5:4 Not tainted 6.7.0-rc2-syzkaller-00029-g9b6de136b5f0 #0 [ 428.812612][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 428.822650][ T5118] Workqueue: hci1 hci_error_reset [ 428.827664][ T5118] Call Trace: [ 428.830928][ T5118] [ 428.833842][ T5118] dump_stack_lvl+0xd9/0x1b0 [ 428.838423][ T5118] kasan_report+0xda/0x110 [ 428.842835][ T5118] ? ida_free+0x218/0x2e0 [ 428.847149][ T5118] ? ida_free+0x218/0x2e0 [ 428.851469][ T5118] kasan_check_range+0xef/0x190 [ 428.856303][ T5118] ida_free+0x218/0x2e0 [ 428.860446][ T5118] ? ida_destroy+0x3e0/0x3e0 [ 428.865022][ T5118] ? bit_wait_timeout+0x160/0x160 [ 428.870043][ T5118] ? hci_conn_unlink+0x486/0x9e0 [ 428.874997][ T5118] hci_conn_del+0x78c/0xe10 [ 428.879494][ T5118] hci_conn_hash_flush+0x189/0x260 [ 428.884600][ T5118] hci_dev_close_sync+0x5a7/0x1160 [ 428.889701][ T5118] ? hci_reset_sync+0x50/0x50 [ 428.894364][ T5118] ? reacquire_held_locks+0x4c0/0x4c0 [ 428.899732][ T5118] hci_dev_do_close+0x2e/0x90 [ 428.904395][ T5118] hci_error_reset+0xa6/0x190 [ 428.909056][ T5118] process_one_work+0x886/0x15d0 [ 428.913987][ T5118] ? lock_sync+0x190/0x190 [ 428.918394][ T5118] ? workqueue_congested+0x300/0x300 [ 428.923671][ T5118] ? assign_work+0x1a0/0x250 [ 428.928251][ T5118] worker_thread+0x8b9/0x1290 [ 428.932923][ T5118] ? process_one_work+0x15d0/0x15d0 [ 428.938116][ T5118] kthread+0x2c6/0x3a0 [ 428.942174][ T5118] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.947364][ T5118] ? kthread_complete_and_exit+0x40/0x40 [ 428.952984][ T5118] ret_from_fork+0x45/0x80 [ 428.958346][ T5118] ? kthread_complete_and_exit+0x40/0x40 [ 428.963966][ T5118] ret_from_fork_asm+0x11/0x20 [ 428.969766][ T5118] [ 428.972785][ T5118] ================================================================== [ 428.980828][ T5118] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 428.988000][ T5118] CPU: 0 PID: 5118 Comm: kworker/u5:4 Not tainted 6.7.0-rc2-syzkaller-00029-g9b6de136b5f0 #0 [ 428.998136][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 429.008177][ T5118] Workqueue: hci1 hci_error_reset [ 429.013191][ T5118] Call Trace: [ 429.016458][ T5118] [ 429.019373][ T5118] dump_stack_lvl+0xd9/0x1b0 [ 429.023953][ T5118] panic+0x6dc/0x790 [ 429.027926][ T5118] ? panic_smp_self_stop+0xa0/0xa0 [ 429.033025][ T5118] ? rcu_is_watching+0x12/0xb0 [ 429.037780][ T5118] ? reacquire_held_locks+0x4c0/0x4c0 [ 429.043149][ T5118] ? check_panic_on_warn+0x1f/0xb0 [ 429.048252][ T5118] check_panic_on_warn+0xab/0xb0 [ 429.053179][ T5118] end_report+0x108/0x150 [ 429.057500][ T5118] kasan_report+0xea/0x110 [ 429.061906][ T5118] ? ida_free+0x218/0x2e0 [ 429.066222][ T5118] ? ida_free+0x218/0x2e0 [ 429.070541][ T5118] kasan_check_range+0xef/0x190 [ 429.075377][ T5118] ida_free+0x218/0x2e0 [ 429.079522][ T5118] ? ida_destroy+0x3e0/0x3e0 [ 429.084104][ T5118] ? bit_wait_timeout+0x160/0x160 [ 429.089120][ T5118] ? hci_conn_unlink+0x486/0x9e0 [ 429.094047][ T5118] hci_conn_del+0x78c/0xe10 [ 429.098543][ T5118] hci_conn_hash_flush+0x189/0x260 [ 429.103643][ T5118] hci_dev_close_sync+0x5a7/0x1160 [ 429.108742][ T5118] ? hci_reset_sync+0x50/0x50 [ 429.113402][ T5118] ? reacquire_held_locks+0x4c0/0x4c0 [ 429.118855][ T5118] hci_dev_do_close+0x2e/0x90 [ 429.123520][ T5118] hci_error_reset+0xa6/0x190 [ 429.128182][ T5118] process_one_work+0x886/0x15d0 [ 429.133117][ T5118] ? lock_sync+0x190/0x190 [ 429.137525][ T5118] ? workqueue_congested+0x300/0x300 [ 429.142802][ T5118] ? assign_work+0x1a0/0x250 [ 429.147379][ T5118] worker_thread+0x8b9/0x1290 [ 429.152053][ T5118] ? process_one_work+0x15d0/0x15d0 [ 429.157241][ T5118] kthread+0x2c6/0x3a0 [ 429.161300][ T5118] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.166482][ T5118] ? kthread_complete_and_exit+0x40/0x40 [ 429.172109][ T5118] ret_from_fork+0x45/0x80 [ 429.176512][ T5118] ? kthread_complete_and_exit+0x40/0x40 [ 429.182134][ T5118] ret_from_fork_asm+0x11/0x20 [ 429.186894][ T5118] [ 429.190164][ T5118] Kernel Offset: disabled [ 429.194464][ T5118] Rebooting in 86400 seconds..