0000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r3 = dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, r3, 0x0) 10:52:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x803, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000017c0)="23000000560081aee4f80b00000f00fe078bc36f16000572fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x444040, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r3}) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0xef, 0x400000000000000, 0x0, 0x0, 0x0, 0x400, 0x1, 0xfffffffffffffffe, 0x0, 0x6, 0x3, 0x4, 0x4, 0x480000000000000, 0xddd, 0x100000000, 0xff, 0x89, 0x6, 0x401, 0xff, 0x0, 0xffffffff00000000, 0x1, 0x7, 0x3, 0x2, 0xff, 0x9, 0x776a, 0x80000000, 0x7, 0x8, 0x5, 0x7, 0x0, 0x1, 0x4, @perf_config_ext={0xd7f, 0x2}, 0x200, 0x80000000, 0x1, 0x0, 0x3, 0x54, 0x8}, 0xffffffffffffffff, 0xf, r0, 0x1) 10:52:49 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:52:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 247.281133] Bluetooth: Invalid header checksum [ 247.310395] Bluetooth: Invalid header checksum [ 247.390374] Bluetooth: Invalid header checksum [ 247.421053] Bluetooth: Invalid header checksum 10:52:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r3 = dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, r3, 0x0) 10:52:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x80000) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000080)=0x2) mount(0x0, 0x0, &(0x7f0000000400)='debugfs\x00', 0x200000, &(0x7f0000000440)='\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f00000002c0)) mount(0x0, 0x0, &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) link(&(0x7f0000000200)='.\x00', &(0x7f0000000280)='./file0\x00') getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3b, 0x0, &(0x7f0000000340)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10:52:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 247.511178] Bluetooth: Invalid header checksum [ 247.530918] Bluetooth: Invalid header checksum 10:52:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r3 = dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, r3, 0x0) [ 247.621035] Bluetooth: Invalid header checksum [ 247.640430] Bluetooth: Invalid header checksum 10:52:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:49 executing program 5: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) [ 247.731053] Bluetooth: Invalid header checksum [ 247.761608] Bluetooth: Invalid header checksum 10:52:49 executing program 5: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) [ 247.840416] Bluetooth: Invalid header checksum [ 247.860444] Bluetooth: Invalid header checksum 10:52:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 247.953400] Bluetooth: Invalid header checksum [ 247.975253] Bluetooth: Invalid header checksum [ 248.060983] Bluetooth: Invalid header checksum [ 248.088044] Bluetooth: Invalid header checksum [ 248.170733] Bluetooth: Invalid header checksum 10:52:50 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:52:50 executing program 5: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) [ 248.191506] Bluetooth: Invalid header checksum [ 248.292408] Bluetooth: Invalid header checksum [ 248.300406] Bluetooth: Invalid header checksum 10:52:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:50 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) sendmmsg(r0, &(0x7f0000000100), 0x8000261, 0x24000004) 10:52:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r3 = dup2(r1, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) [ 248.410487] Bluetooth: Invalid header checksum [ 248.411856] Bluetooth: Invalid header checksum 10:52:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r3 = dup2(r1, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) 10:52:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 248.520407] Bluetooth: Invalid header checksum [ 248.530369] Bluetooth: Invalid header checksum 10:52:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) r3 = dup2(r1, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) [ 248.610757] kvm_hv_set_msr: 269 callbacks suppressed [ 248.610770] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000064 data 0x4d00000000f [ 248.630840] Bluetooth: Invalid header checksum [ 248.641946] Bluetooth: Invalid header checksum [ 248.689890] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000030 data 0x4d00000000f [ 248.726242] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000064 data 0x4d00000000f 10:52:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000003f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) dup2(r1, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) [ 248.740658] Bluetooth: Invalid header checksum [ 248.750431] Bluetooth: Invalid header checksum [ 248.811530] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000033 data 0x4d00000000f [ 248.850486] Bluetooth: Invalid header checksum [ 248.860637] Bluetooth: Invalid header checksum [ 248.889441] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004c data 0x4d00000000f [ 248.923632] *** Guest State *** [ 248.940886] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 248.955932] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000016 data 0x4d00000000f [ 248.961287] Bluetooth: Invalid header checksum [ 248.981014] Bluetooth: Invalid header checksum [ 248.997414] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 249.017240] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006f data 0x4d00000000f [ 249.047810] CR3 = 0x00000000fffbc000 [ 249.064721] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000039 data 0x4d00000000f [ 249.078943] Bluetooth: Invalid header checksum [ 249.084124] RSP = 0x0000000000002006 RIP = 0x0000000000000040 [ 249.090635] Bluetooth: Invalid header checksum 10:52:51 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 10:52:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) dup2(r1, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) [ 249.108813] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000085 data 0x4d00000000f [ 249.111479] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 249.139173] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 249.156131] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 249.169648] kvm [9915]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004f data 0x4d00000000f [ 249.173521] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 249.187637] Bluetooth: Invalid header checksum [ 249.198832] SS: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 [ 249.209177] Bluetooth: Invalid header checksum [ 249.210372] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:52:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\vc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000000080)="a6"}) [ 249.252489] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 249.291381] Bluetooth: Invalid header checksum 10:52:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) dup2(r1, r0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) [ 249.295984] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 249.324923] Bluetooth: Invalid header checksum [ 249.344480] binder: BINDER_SET_CONTEXT_MGR already set [ 249.354256] GDTR: limit=0x00000000, base=0x0000000000000000 [ 249.386207] binder: 9950:9956 ioctl 40046207 0 returned -16 [ 249.400529] Bluetooth: Invalid header checksum [ 249.408223] binder: 9950:9964 ERROR: BC_REGISTER_LOOPER called without request [ 249.420845] Bluetooth: Invalid header checksum [ 249.428051] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:52:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xfff) write$FUSE_DIRENT(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 249.465550] binder: release 9950:9956 transaction 11 out, still active [ 249.480718] binder: undelivered TRANSACTION_COMPLETE [ 249.486140] IDTR: limit=0x00000000, base=0x0000000000000000 [ 249.510635] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 249.529142] Bluetooth: Invalid header checksum [ 249.534192] Bluetooth: Invalid header checksum 10:52:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 249.557712] EFER = 0x0000000000000000 PAT = 0x0007040600070406 10:52:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 249.601950] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 249.620464] Bluetooth: Invalid header checksum [ 249.640564] Bluetooth: Invalid header checksum [ 249.644269] Interruptibility = 00000000 ActivityState = 00000000 [ 249.674304] *** Host State *** [ 249.674673] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 249.685171] RIP = 0xffffffff811749aa RSP = 0xffff88805c33f998 [ 249.722031] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 249.730445] Bluetooth: Invalid header checksum [ 249.750704] Bluetooth: Invalid header checksum [ 249.757794] FSBase=00007f5e48861700 GSBase=ffff8880aef00000 TRBase=fffffe0000034000 [ 249.781805] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 249.799870] CR0=0000000080050033 CR3=0000000090485000 CR4=00000000001426e0 [ 249.816100] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86201910 10:52:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x500) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 249.834907] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 249.841198] Bluetooth: Invalid header checksum [ 249.860577] Bluetooth: Invalid header checksum [ 249.866525] *** Control State *** [ 249.903920] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ca [ 249.933259] EntryControls=0000d1ff ExitControls=002fefff [ 249.946110] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 249.951230] Bluetooth: Invalid header checksum [ 249.961126] VMEntry: intr_info=8000030c errcode=00000000 ilen=00000000 [ 249.971913] Bluetooth: Invalid header checksum [ 249.976345] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 249.979821] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 249.991101] reason=80000021 qualification=0000000000000000 [ 250.008916] IDTVectoring: info=00000000 errcode=00000000 [ 250.021540] TSC Offset = 0xffffff77a3a3cb4f [ 250.030358] EPT pointer = 0x000000007f74301e 10:52:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000003f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.061015] Bluetooth: Invalid header checksum [ 250.083067] Bluetooth: Invalid header checksum 10:52:52 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) [ 250.118982] binder: 9950:9956 ERROR: BC_REGISTER_LOOPER called without request [ 250.119462] binder: release 9950:9964 transaction 12 out, still active 10:52:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 250.169996] binder: undelivered TRANSACTION_COMPLETE [ 250.172716] Bluetooth: Invalid header checksum [ 250.196638] *** Guest State *** [ 250.200486] Bluetooth: Invalid header checksum [ 250.212994] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 10:52:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\vc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000000080)="a6"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 250.280617] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 250.280869] Bluetooth: Invalid header checksum [ 250.311767] Bluetooth: Invalid header checksum 10:52:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.367425] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 250.391832] Bluetooth: Invalid header checksum [ 250.403971] CR3 = 0x00000000fffbc000 [ 250.420292] Bluetooth: Invalid header checksum [ 250.428739] RSP = 0x0000000000002006 RIP = 0x0000000000000040 [ 250.458173] binder: BINDER_SET_CONTEXT_MGR already set [ 250.474941] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 250.500470] Bluetooth: Invalid header checksum [ 250.505769] binder: 10005:10011 ioctl 40046207 0 returned -16 [ 250.522822] binder: 10005:10014 ERROR: BC_REGISTER_LOOPER called without request [ 250.526852] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 250.537994] Bluetooth: Invalid header checksum [ 250.544028] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 250.560350] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:52:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x500) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 250.569058] binder: release 10005:10011 transaction 13 out, still active [ 250.579967] binder: undelivered TRANSACTION_COMPLETE [ 250.589648] FAT-fs (loop3): Filesystem has been set read-only [ 250.611953] Bluetooth: Invalid header checksum [ 250.622532] binder: 10005:10014 got reply transaction with no transaction stack [ 250.632754] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 250.638097] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 250.645240] binder: 10005:10014 transaction failed 29201/-71, size 0-0 line 2709 [ 250.656722] Bluetooth: Invalid header checksum [ 250.661279] SS: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 10:52:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.699419] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 250.708482] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 250.720350] Bluetooth: Invalid header checksum [ 250.738173] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:52:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 250.754952] Bluetooth: Invalid header checksum [ 250.795317] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 250.830631] Bluetooth: Invalid header checksum [ 250.838648] GDTR: limit=0x00000000, base=0x0000000000000000 [ 250.870373] Bluetooth: Invalid header checksum [ 250.889884] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 250.929078] IDTR: limit=0x00000000, base=0x0000000000000000 [ 250.940784] Bluetooth: Invalid header checksum [ 250.975111] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 250.996730] Bluetooth: Invalid header checksum [ 251.009023] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 251.040471] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 251.050703] Bluetooth: Invalid header checksum [ 251.071779] Interruptibility = 00000000 ActivityState = 00000000 10:52:53 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 10:52:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 251.091383] *** Host State *** [ 251.097352] RIP = 0xffffffff811749aa RSP = 0xffff88805c207998 [ 251.104024] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 251.110726] Bluetooth: Invalid header checksum [ 251.115934] FSBase=00007f5e48861700 GSBase=ffff8880aef00000 TRBase=fffffe0000003000 [ 251.138031] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 251.149446] CR0=0000000080050033 CR3=0000000090542000 CR4=00000000001426e0 [ 251.160686] Bluetooth: Invalid header checksum [ 251.179088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 251.182281] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86201910 [ 251.220754] Bluetooth: Invalid header checksum [ 251.225572] binder: BINDER_SET_CONTEXT_MGR already set [ 251.226076] FAT-fs (loop3): Filesystem has been set read-only [ 251.234349] binder: 10005:10014 ioctl 40046207 0 returned -16 [ 251.251794] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 17) [ 251.253191] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 251.269004] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.270410] Bluetooth: Invalid header checksum [ 251.300505] binder: 10005:10033 ERROR: BC_REGISTER_LOOPER called without request [ 251.315516] binder: release 10005:10011 transaction 15 out, still active [ 251.319477] *** Control State *** [ 251.326133] binder: 10005:10038 got reply transaction with no transaction stack [ 251.346186] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ca [ 251.347449] binder: undelivered TRANSACTION_COMPLETE [ 251.369075] binder: 10005:10038 transaction failed 29201/-71, size 0-0 line 2709 [ 251.377042] Bluetooth: Invalid header checksum [ 251.382996] Bluetooth: Invalid header checksum [ 251.386484] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.413963] EntryControls=0000d1ff ExitControls=002fefff [ 251.422297] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 251.429419] VMEntry: intr_info=8000030c errcode=00000000 ilen=00000000 [ 251.439789] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 251.466285] Bluetooth: Invalid header checksum [ 251.477767] reason=80000021 qualification=0000000000000000 [ 251.489460] IDTVectoring: info=00000000 errcode=00000000 [ 251.495936] Bluetooth: Invalid header checksum [ 251.505830] TSC Offset = 0xffffff76f0e55a2c [ 251.511092] EPT pointer = 0x0000000096c5001e 10:52:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000003f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x500) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 10:52:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x500) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 251.551739] Bluetooth: Invalid header checksum [ 251.601042] Bluetooth: Invalid header checksum [ 251.612602] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 251.633709] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 251.673001] Bluetooth: Invalid header checksum [ 251.710949] Bluetooth: Invalid header checksum 10:52:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 251.739870] *** Guest State *** [ 251.771880] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 251.794773] Bluetooth: Invalid header checksum [ 251.820351] Bluetooth: Invalid header checksum [ 251.848707] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 251.904312] CR3 = 0x00000000fffbc000 [ 251.911014] Bluetooth: Invalid header checksum [ 251.924366] RSP = 0x0000000000002006 RIP = 0x0000000000000040 [ 251.930967] Bluetooth: Invalid header checksum [ 251.963805] RFLAGS=0x00010046 DR7 = 0x0000000000000400 10:52:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 252.012522] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 252.021177] Bluetooth: Invalid header checksum [ 252.040735] Bluetooth: Invalid header checksum 10:52:54 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:52:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, 0x0, 0x26f) [ 252.063735] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 252.101141] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:52:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 252.140499] Bluetooth: Invalid header checksum [ 252.152590] Bluetooth: Invalid header checksum [ 252.157772] SS: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 [ 252.193799] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:52:54 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) inotify_add_watch(r0, 0x0, 0x10000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)=""/196, 0xc4}, {0x0}, {0x0}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/171, 0xab}, {0x0}, {0x0}], 0x7) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fallocate(r2, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x80000001}) sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) mlockall(0x0) syz_execute_func(0x0) [ 252.235606] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 252.251104] Bluetooth: Invalid header checksum [ 252.261077] Bluetooth: Invalid header checksum 10:52:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x500) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 252.297042] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 252.360388] Bluetooth: Invalid header checksum [ 252.370599] Bluetooth: Invalid header checksum [ 252.388857] GDTR: limit=0x00000000, base=0x0000000000000000 [ 252.399987] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 252.424178] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 252.435117] IDTR: limit=0x00000000, base=0x0000000000000000 [ 252.444758] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 252.459694] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 252.469291] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 252.481600] Bluetooth: Invalid header checksum [ 252.486343] Bluetooth: Invalid header checksum [ 252.498167] Interruptibility = 00000000 ActivityState = 00000000 [ 252.516853] *** Host State *** [ 252.520298] RIP = 0xffffffff811749aa RSP = 0xffff888059ec7998 [ 252.526513] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 252.537911] FSBase=00007f5e48861700 GSBase=ffff8880aee00000 TRBase=fffffe0000003000 [ 252.546710] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 252.561131] CR0=0000000080050033 CR3=0000000099fbd000 CR4=00000000001426f0 [ 252.575175] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86201910 [ 252.590918] Bluetooth: Invalid header checksum [ 252.594264] Bluetooth: Invalid header checksum [ 252.602707] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 252.608899] *** Control State *** [ 252.613039] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ca [ 252.619842] EntryControls=0000d1ff ExitControls=002fefff [ 252.645323] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 252.652575] VMEntry: intr_info=8000030c errcode=00000000 ilen=00000000 [ 252.659337] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 252.666408] reason=80000021 qualification=0000000000000000 [ 252.673398] IDTVectoring: info=00000000 errcode=00000000 [ 252.683876] TSC Offset = 0xffffff76218a3da7 [ 252.688318] EPT pointer = 0x0000000093caa01e 10:52:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:54 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:52:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:54 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) inotify_add_watch(r0, 0x0, 0x10000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)=""/196, 0xc4}, {0x0}, {0x0}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/171, 0xab}, {0x0}, {0x0}], 0x7) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fallocate(r2, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x80000001}) sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) mlockall(0x0) syz_execute_func(0x0) [ 252.701102] Bluetooth: Invalid header checksum [ 252.701670] Bluetooth: Invalid header checksum [ 252.810496] Bluetooth: Invalid header checksum [ 252.815591] Bluetooth: Invalid header checksum 10:52:54 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 252.860956] *** Guest State *** 10:52:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 252.883098] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 252.898932] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 252.920482] Bluetooth: Invalid header checksum [ 252.922606] Bluetooth: Invalid header checksum 10:52:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\vc'], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000000080)="a6"}) [ 252.939586] CR3 = 0x00000000fffbc000 [ 252.964228] RSP = 0x0000000000002006 RIP = 0x0000000000000040 [ 252.993025] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 253.010729] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 10:52:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 253.040385] Bluetooth: Invalid header checksum [ 253.045775] Bluetooth: Invalid header checksum [ 253.062193] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 253.097188] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 253.112176] binder: BINDER_SET_CONTEXT_MGR already set 10:52:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 253.138824] binder: 10119:10127 ioctl 40046207 0 returned -16 [ 253.140579] Bluetooth: Invalid header checksum [ 253.145404] Bluetooth: Invalid header checksum [ 253.156714] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 253.169966] binder: 10119:10130 ERROR: BC_REGISTER_LOOPER called without request 10:52:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 253.193771] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 253.227977] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 253.247103] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 253.249782] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 253.261306] GDTR: limit=0x00000000, base=0x0000000000000000 [ 253.269989] Bluetooth: Invalid header checksum [ 253.277750] Bluetooth: Invalid header checksum 10:52:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 253.335348] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 253.360351] Bluetooth: Invalid header checksum [ 253.371396] Bluetooth: Invalid header checksum [ 253.372988] IDTR: limit=0x00000000, base=0x0000000000000000 [ 253.415022] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 253.449487] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 253.460786] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 253.468439] Interruptibility = 00000000 ActivityState = 00000000 [ 253.475259] *** Host State *** [ 253.475280] Bluetooth: Invalid header checksum [ 253.483724] Bluetooth: Invalid header checksum [ 253.485541] RIP = 0xffffffff811749aa RSP = 0xffff88805c89f998 [ 253.504789] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 253.518142] FSBase=00007f5e48861700 GSBase=ffff8880aef00000 TRBase=fffffe0000034000 [ 253.550362] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 253.562832] CR0=0000000080050033 CR3=0000000093da6000 CR4=00000000001426e0 [ 253.570307] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86201910 [ 253.579262] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 253.590380] Bluetooth: Invalid header checksum [ 253.595256] Bluetooth: Invalid header checksum [ 253.614876] *** Control State *** [ 253.628954] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ca [ 253.648186] EntryControls=0000d1ff ExitControls=002fefff [ 253.663804] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 253.675071] VMEntry: intr_info=8000030c errcode=00000000 ilen=00000000 [ 253.690845] Bluetooth: Invalid header checksum [ 253.694758] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 253.702010] Bluetooth: Invalid header checksum [ 253.702871] reason=80000021 qualification=0000000000000000 [ 253.717780] IDTVectoring: info=00000000 errcode=00000000 10:52:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:52:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 253.726187] TSC Offset = 0xffffff7585a6e6c5 [ 253.735177] EPT pointer = 0x00000000a93ec01e [ 253.800610] Bluetooth: Invalid header checksum [ 253.810884] Bluetooth: Invalid header checksum [ 253.833300] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:52:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 253.882947] binder: BINDER_SET_CONTEXT_MGR already set [ 253.888291] binder: 10119:10130 ioctl 40046207 0 returned -16 [ 253.921809] Bluetooth: Invalid header checksum 10:52:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 253.943828] kvm_hv_set_msr: 595 callbacks suppressed [ 253.943839] kvm [10152]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006d data 0x4d00000000f [ 253.955664] Bluetooth: Invalid header checksum [ 253.959119] binder: 10119:10127 ERROR: BC_REGISTER_LOOPER called without request [ 253.978281] *** Guest State *** [ 254.007208] kvm [10152]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0x4d00000000f [ 254.016620] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 254.016635] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 254.016639] CR3 = 0x00000000fffbc000 [ 254.016646] RSP = 0x0000000000002006 RIP = 0x0000000000000040 [ 254.016654] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 254.016667] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 254.016676] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 254.016690] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 254.016704] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 254.016717] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 254.016733] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 254.016747] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 254.016757] GDTR: limit=0x00000000, base=0x0000000000000000 [ 254.016771] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 254.016781] IDTR: limit=0x00000000, base=0x0000000000000000 [ 254.016795] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 254.016804] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 254.016813] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 254.016869] Interruptibility = 00000000 ActivityState = 00000000 [ 254.040853] Bluetooth: Invalid header checksum [ 254.047302] Bluetooth: Invalid header checksum [ 254.118421] *** Host State *** [ 254.141260] Bluetooth: Invalid header checksum [ 254.150913] kvm [10152]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 254.205566] RIP = 0xffffffff811749aa RSP = 0xffff88805900f998 10:52:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 254.250391] Bluetooth: Invalid header checksum [ 254.279702] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 254.309389] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 254.331889] FSBase=00007f5e48861700 GSBase=ffff8880aee00000 TRBase=fffffe0000003000 [ 254.344219] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 254.352064] CR0=0000000080050033 CR3=000000008219c000 CR4=00000000001426f0 [ 254.355088] kvm [10152]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000041 data 0x4d00000000f [ 254.359318] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86201910 [ 254.387537] Bluetooth: Invalid header checksum 10:52:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 254.415334] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 254.459434] *** Control State *** [ 254.467998] kvm [10152]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000f data 0x4d00000000f [ 254.470810] Bluetooth: Invalid header checksum [ 254.489396] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ca [ 254.517680] EntryControls=0000d1ff ExitControls=002fefff [ 254.521123] Bluetooth: Invalid header checksum [ 254.527927] Bluetooth: Invalid header checksum [ 254.528261] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:52:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 254.570320] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 254.571450] kvm [10152]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000079 data 0x4d00000000f [ 254.580932] Bluetooth: Invalid header checksum [ 254.597412] Bluetooth: Invalid header checksum [ 254.627888] Bluetooth: Invalid header checksum 10:52:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 254.650811] VMEntry: intr_info=8000030c errcode=00000000 ilen=00000000 [ 254.652231] Bluetooth: Invalid header checksum [ 254.690677] Bluetooth: Invalid header checksum [ 254.720967] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 254.754020] Bluetooth: Invalid header checksum [ 254.775874] reason=80000021 qualification=0000000000000000 [ 254.801728] Bluetooth: Invalid header checksum 10:52:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 254.821034] IDTVectoring: info=00000000 errcode=00000000 [ 254.828616] Bluetooth: Invalid header checksum [ 254.866334] TSC Offset = 0xffffff74efd8bb2f [ 254.898941] EPT pointer = 0x000000009200f01e [ 254.911237] Bluetooth: Invalid header checksum [ 254.920609] Bluetooth: Invalid header checksum 10:52:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa710400000000000000fee2e2d5f022b3156407b701ad58084a96ec22ad06daab7eecc033a048c958fae225025b1eff2cddc9105e15afec33d72d3f384b16fa628bc97adfc0b7146704f07516eb2b1de420f12be010ef17dfa412018000006a02be0d"], 0xc5) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:52:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\vc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000000080)="a6"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 10:52:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) write(r0, &(0x7f0000000140)="150000000800000000000000c86b6525000010", 0x13) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) [ 255.023705] Bluetooth: Invalid header checksum [ 255.031123] Bluetooth: Invalid header checksum 10:52:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.080628] binder: BINDER_SET_CONTEXT_MGR already set 10:52:57 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 255.128716] binder: 10207:10212 ioctl 40046207 0 returned -16 [ 255.135846] Bluetooth: Invalid header checksum [ 255.140868] Bluetooth: Invalid header checksum [ 255.155752] binder: 10207:10221 ERROR: BC_REGISTER_LOOPER called without request 10:52:57 executing program 2: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\vc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000000080)="a6"}) 10:52:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.192284] binder: release 10207:10212 transaction 17 out, still active [ 255.198435] *** Guest State *** [ 255.206008] binder: undelivered TRANSACTION_COMPLETE [ 255.222006] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 255.245082] binder: 10207:10221 got reply transaction with no transaction stack [ 255.248483] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 255.262530] Bluetooth: Invalid header checksum [ 255.268561] Bluetooth: Invalid header checksum [ 255.274624] binder: 10207:10221 transaction failed 29201/-71, size 0-0 line 2709 [ 255.281228] CR3 = 0x00000000fffbc000 [ 255.290425] RSP = 0x0000000000002006 RIP = 0x0000000000000040 [ 255.308667] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 255.333564] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 255.346424] binder: BINDER_SET_CONTEXT_MGR already set [ 255.352075] Bluetooth: Invalid header checksum [ 255.365065] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 255.373539] Bluetooth: Invalid header checksum [ 255.373646] binder: 10230:10232 ioctl 40046207 0 returned -16 10:52:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.408877] binder: 10230:10237 ERROR: BC_REGISTER_LOOPER called without request [ 255.410265] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:52:57 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 255.462889] Bluetooth: Invalid header checksum [ 255.464174] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 255.480376] Bluetooth: Invalid header checksum [ 255.498238] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 255.521120] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 255.546000] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:52:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 255.564863] GDTR: limit=0x00000000, base=0x0000000000000000 [ 255.574451] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 255.582684] IDTR: limit=0x00000000, base=0x0000000000000000 [ 255.591312] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 255.599424] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 255.608613] Bluetooth: Invalid header checksum [ 255.608638] Bluetooth: Invalid header checksum 10:52:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.616162] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 255.641223] Interruptibility = 00000000 ActivityState = 00000000 [ 255.653595] *** Host State *** [ 255.656984] RIP = 0xffffffff811749aa RSP = 0xffff888064297998 [ 255.663214] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 255.669756] FSBase=00007f5e48861700 GSBase=ffff8880aef00000 TRBase=fffffe0000034000 [ 255.685505] Bluetooth: Invalid header checksum [ 255.707491] Bluetooth: Invalid header checksum [ 255.730847] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 255.754130] CR0=0000000080050033 CR3=0000000096c92000 CR4=00000000001426e0 [ 255.790641] Bluetooth: Invalid header checksum [ 255.798934] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86201910 [ 255.810472] Bluetooth: Invalid header checksum [ 255.827464] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 255.837782] *** Control State *** [ 255.844828] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ca [ 255.846429] binder: BINDER_SET_CONTEXT_MGR already set [ 255.865763] binder: 10207:10221 ioctl 40046207 0 returned -16 [ 255.885454] EntryControls=0000d1ff ExitControls=002fefff [ 255.889400] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.897908] binder: 10207:10221 ERROR: BC_REGISTER_LOOPER called without request [ 255.904500] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 255.916484] Bluetooth: Invalid header checksum [ 255.921806] Bluetooth: Invalid header checksum [ 255.922645] VMEntry: intr_info=8000030c errcode=00000000 ilen=00000000 [ 255.928909] binder: release 10207:10212 transaction 19 out, still active [ 255.933201] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 255.933207] reason=80000021 qualification=0000000000000000 [ 255.933212] IDTVectoring: info=00000000 errcode=00000000 [ 255.933217] TSC Offset = 0xffffff7448479e49 [ 255.941745] binder: 10207:10221 got reply transaction with no transaction stack [ 255.947629] EPT pointer = 0x000000009ee2e01e [ 255.962239] binder: undelivered TRANSACTION_COMPLETE 10:52:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:52:57 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:52:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 10:52:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 255.988551] binder: 10207:10221 transaction failed 29201/-71, size 0-0 line 2709 [ 256.013853] Bluetooth: Invalid header checksum [ 256.031116] Bluetooth: Invalid header checksum [ 256.033337] binder: undelivered TRANSACTION_ERROR: 29201 10:52:58 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 256.103857] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.120387] Bluetooth: Invalid header checksum [ 256.136031] binder: BINDER_SET_CONTEXT_MGR already set [ 256.141842] Bluetooth: Invalid header checksum [ 256.148144] binder: 10230:10237 ioctl 40046207 0 returned -16 [ 256.180453] binder: 10230:10237 ERROR: BC_REGISTER_LOOPER called without request 10:52:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 256.231205] Bluetooth: Invalid header checksum [ 256.255696] Bluetooth: Invalid header checksum 10:52:58 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x10000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)=""/196, 0xc4}, {0x0}, {&(0x7f0000000340)=""/167, 0xa7}, {0x0}, {&(0x7f0000001400)=""/171, 0xab}, {0x0}, {0x0}], 0x7) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fallocate(r2, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x80000001}) sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) mlockall(0x0) syz_execute_func(0x0) 10:52:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 256.340527] Bluetooth: Invalid header checksum 10:52:58 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 256.360924] Bluetooth: Invalid header checksum 10:52:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 256.451725] Bluetooth: Invalid header checksum [ 256.471301] Bluetooth: Invalid header checksum 10:52:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 256.560447] Bluetooth: Invalid header checksum [ 256.598441] Bluetooth: Invalid header checksum 10:52:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 10:52:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:52:58 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 256.670329] Bluetooth: Invalid header checksum 10:52:58 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x10000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)=""/196, 0xc4}, {0x0}, {&(0x7f0000000340)=""/167, 0xa7}, {0x0}, {&(0x7f0000001400)=""/171, 0xab}, {0x0}, {0x0}], 0x7) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fallocate(r2, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x80000001}) sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) mlockall(0x0) syz_execute_func(0x0) [ 256.704086] Bluetooth: Invalid header checksum 10:52:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 256.782356] Bluetooth: Invalid header checksum 10:52:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 256.814557] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.821245] Bluetooth: Invalid header checksum [ 256.888462] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.890400] Bluetooth: Invalid header checksum [ 256.920507] Bluetooth: Invalid header checksum 10:52:58 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 257.000609] Bluetooth: Invalid header checksum 10:52:58 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x10000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)=""/196, 0xc4}, {0x0}, {&(0x7f0000000340)=""/167, 0xa7}, {0x0}, {&(0x7f0000001400)=""/171, 0xab}, {0x0}, {0x0}], 0x7) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fallocate(r2, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x80000001}) sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) mlockall(0x0) syz_execute_func(0x0) [ 257.033919] Bluetooth: Invalid header checksum 10:52:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 257.139858] Bluetooth: Invalid header checksum [ 257.150749] Bluetooth: Invalid header checksum [ 257.220383] Bluetooth: Invalid header checksum [ 257.260448] Bluetooth: Invalid header checksum 10:52:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 257.332487] Bluetooth: Invalid header checksum [ 257.370867] Bluetooth: Invalid header checksum 10:52:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:52:59 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 257.440454] Bluetooth: Invalid header checksum 10:52:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 257.480450] Bluetooth: Invalid header checksum 10:52:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:52:59 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000140)={0x2d}, 0x8) [ 257.530951] FAT-fs (loop3): bogus number of reserved sectors [ 257.538196] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 257.550335] Bluetooth: Invalid header checksum [ 257.595139] Bluetooth: Invalid header checksum [ 257.611561] FAT-fs (loop3): Can't find a valid FAT filesystem 10:52:59 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 257.660395] Bluetooth: Invalid header checksum 10:52:59 executing program 2: syz_execute_func(&(0x7f0000000000)="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") [ 257.700684] Bluetooth: Invalid header checksum 10:52:59 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000140)={0x2d}, 0x8) 10:52:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 257.771934] Bluetooth: Invalid header checksum [ 257.820798] Bluetooth: Invalid header checksum 10:52:59 executing program 1: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00004edfd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\vc'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f0000000080)="a6"}) [ 257.881518] Bluetooth: Invalid header checksum [ 257.930462] Bluetooth: Invalid header checksum 10:52:59 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa"], 0x63) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 257.955744] kvm [10385]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 257.967516] binder: BINDER_SET_CONTEXT_MGR already set [ 257.990582] Bluetooth: Invalid header checksum [ 258.000303] kvm [10385]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 258.004647] binder: 10393:10397 ioctl 40046207 0 returned -16 [ 258.021509] binder: 10393:10399 ERROR: BC_REGISTER_LOOPER called without request [ 258.033610] kvm [10385]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 258.043405] Bluetooth: Invalid header checksum 10:52:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 258.044575] kvm [10385]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 258.105137] Bluetooth: Invalid header checksum [ 258.128658] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 258.150847] Bluetooth: Invalid header checksum [ 258.210427] Bluetooth: Invalid header checksum [ 258.260410] Bluetooth: Invalid header checksum 10:53:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 258.320336] Bluetooth: Invalid header checksum [ 258.372633] Bluetooth: Invalid header checksum [ 258.415709] FAT-fs (loop3): bogus number of reserved sectors [ 258.430808] Bluetooth: Invalid header checksum [ 258.436754] FAT-fs (loop3): Can't find a valid FAT filesystem 10:53:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:00 executing program 5: [ 258.480927] Bluetooth: Invalid header checksum [ 258.541172] Bluetooth: Invalid header checksum 10:53:00 executing program 5: [ 258.591447] Bluetooth: Invalid header checksum 10:53:00 executing program 5: r0 = socket(0x1000000010, 0x4008000000803, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3e9) r1 = gettid() write$binfmt_script(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0xfffffffffffffe95) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0xb0) tkill(r1, 0x1000000000016) [ 258.652530] Bluetooth: Invalid header checksum 10:53:00 executing program 2: r0 = open(&(0x7f0000000140)='.\x00', 0x143042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0xfffffffffffffe5b) r1 = gettid() ptrace$peekuser(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x7def9a79ee817371) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0xfffffffffffffe6f) write$P9_ROPEN(r0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) pipe2(0x0, 0x0) tkill(r1, 0x1000000000016) [ 258.704933] Bluetooth: Invalid header checksum 10:53:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:00 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8, 0x80000001}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 258.760723] Bluetooth: Invalid header checksum 10:53:00 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000b00)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 258.820487] Bluetooth: Invalid header checksum [ 258.870929] Bluetooth: Invalid header checksum 10:53:00 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5503eec93ca3bfa"], 0x63) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:00 executing program 2: [ 258.930611] Bluetooth: Invalid header checksum [ 258.981315] Bluetooth: Invalid header checksum [ 259.044208] Bluetooth: Invalid header checksum [ 259.091588] Bluetooth: Invalid header checksum 10:53:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:01 executing program 5: 10:53:01 executing program 2: 10:53:01 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8, 0x80000001}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 259.164988] Bluetooth: Invalid header checksum [ 259.200604] Bluetooth: Invalid header checksum 10:53:01 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0xfff) write$FUSE_DIRENT(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="85"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8, 0x80000001}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 10:53:01 executing program 5: 10:53:01 executing program 1: [ 259.292377] Bluetooth: Invalid header checksum [ 259.296675] FAT-fs (loop3): bogus number of reserved sectors [ 259.312936] Bluetooth: Invalid header checksum [ 259.319719] FAT-fs (loop3): Can't find a valid FAT filesystem 10:53:01 executing program 5: [ 259.340779] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 259.380393] Bluetooth: Invalid header checksum 10:53:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 259.409912] FAT-fs (loop0): Filesystem has been set read-only [ 259.420626] Bluetooth: Invalid header checksum [ 259.452538] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) 10:53:01 executing program 1: 10:53:01 executing program 5: [ 259.494261] Bluetooth: Invalid header checksum [ 259.531709] Bluetooth: Invalid header checksum [ 259.602548] Bluetooth: Invalid header checksum [ 259.643276] Bluetooth: Invalid header checksum [ 259.710361] Bluetooth: Invalid header checksum [ 259.750418] Bluetooth: Invalid header checksum [ 259.820462] Bluetooth: Invalid header checksum [ 259.860506] Bluetooth: Invalid header checksum [ 259.930297] Bluetooth: Invalid header checksum [ 259.970376] Bluetooth: Invalid header checksum 10:53:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:01 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:01 executing program 2: 10:53:01 executing program 5: 10:53:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:53:01 executing program 1: [ 260.040620] Bluetooth: Invalid header checksum 10:53:02 executing program 2: 10:53:02 executing program 5: [ 260.080569] Bluetooth: Invalid header checksum 10:53:02 executing program 1: 10:53:02 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 260.151779] Bluetooth: Invalid header checksum 10:53:02 executing program 2: 10:53:02 executing program 5: [ 260.190517] Bluetooth: Invalid header checksum [ 260.198685] FAT-fs (loop3): bogus number of reserved sectors [ 260.260542] Bluetooth: Invalid header checksum [ 260.276269] FAT-fs (loop3): Can't find a valid FAT filesystem [ 260.310869] Bluetooth: Invalid header checksum [ 260.371289] Bluetooth: Invalid header checksum [ 260.420460] Bluetooth: Invalid header checksum [ 260.480369] Bluetooth: Invalid header checksum [ 260.541689] Bluetooth: Invalid header checksum [ 260.590318] Bluetooth: Invalid header checksum [ 260.650687] Bluetooth: Invalid header checksum [ 260.704917] Bluetooth: Invalid header checksum [ 260.761703] Bluetooth: Invalid header checksum [ 260.810289] Bluetooth: Invalid header checksum [ 260.870531] Bluetooth: Invalid header checksum [ 260.920378] Bluetooth: Invalid header checksum 10:53:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:02 executing program 1: 10:53:02 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:53:02 executing program 5: 10:53:02 executing program 2: 10:53:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:02 executing program 1: [ 260.980450] Bluetooth: Invalid header checksum 10:53:02 executing program 2: 10:53:02 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:53:02 executing program 5: [ 261.031211] Bluetooth: Invalid header checksum 10:53:03 executing program 1: [ 261.090931] Bluetooth: Invalid header checksum 10:53:03 executing program 5: [ 261.119603] FAT-fs (loop3): bogus number of reserved sectors [ 261.140315] Bluetooth: Invalid header checksum [ 261.200472] Bluetooth: Invalid header checksum [ 261.204543] FAT-fs (loop3): Can't find a valid FAT filesystem [ 261.250365] Bluetooth: Invalid header checksum [ 261.318114] Bluetooth: Invalid header checksum [ 261.360835] Bluetooth: Invalid header checksum [ 261.421830] Bluetooth: Invalid header checksum [ 261.470584] Bluetooth: Invalid header checksum [ 261.530393] Bluetooth: Invalid header checksum [ 261.580564] Bluetooth: Invalid header checksum [ 261.644901] Bluetooth: Invalid header checksum [ 261.690365] Bluetooth: Invalid header checksum [ 261.752702] Bluetooth: Invalid header checksum [ 261.800459] Bluetooth: Invalid header checksum 10:53:03 executing program 1: 10:53:03 executing program 2: 10:53:03 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:53:03 executing program 5: 10:53:03 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:03 executing program 2: [ 261.860965] Bluetooth: Invalid header checksum 10:53:03 executing program 1: 10:53:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:03 executing program 5: [ 261.911325] Bluetooth: Invalid header checksum [ 261.970539] Bluetooth: Invalid header checksum 10:53:03 executing program 1: [ 262.001140] FAT-fs (loop3): bogus number of reserved sectors [ 262.023420] Bluetooth: Invalid header checksum 10:53:03 executing program 2: 10:53:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:03 executing program 5: [ 262.056049] FAT-fs (loop3): Can't find a valid FAT filesystem [ 262.080857] Bluetooth: Invalid header checksum 10:53:04 executing program 1: [ 262.130301] Bluetooth: Invalid header checksum 10:53:04 executing program 2: [ 262.193212] Bluetooth: Invalid header checksum [ 262.241785] Bluetooth: Invalid header checksum [ 262.313409] Bluetooth: Invalid header checksum [ 262.354113] Bluetooth: Invalid header checksum [ 262.420909] Bluetooth: Invalid header checksum [ 262.461074] Bluetooth: Invalid header checksum [ 262.530372] Bluetooth: Invalid header checksum [ 262.573933] Bluetooth: Invalid header checksum [ 262.650299] Bluetooth: Invalid header checksum [ 262.681024] Bluetooth: Invalid header checksum [ 262.761395] Bluetooth: Invalid header checksum [ 262.790944] Bluetooth: Invalid header checksum 10:53:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad5429"], 0x32) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:04 executing program 5: 10:53:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:04 executing program 1: 10:53:04 executing program 2: 10:53:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000380), 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:04 executing program 2: 10:53:04 executing program 1: 10:53:04 executing program 5: 10:53:04 executing program 2: [ 262.872121] Bluetooth: Invalid header checksum 10:53:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 262.903951] Bluetooth: Invalid header checksum [ 262.937519] FAT-fs (loop3): bogus number of reserved sectors [ 262.953809] FAT-fs (loop3): Can't find a valid FAT filesystem [ 262.980424] Bluetooth: Invalid header checksum 10:53:04 executing program 2: [ 263.010343] Bluetooth: Invalid header checksum [ 263.100378] Bluetooth: Invalid header checksum [ 263.120701] Bluetooth: Invalid header checksum [ 263.210713] Bluetooth: Invalid header checksum [ 263.230469] Bluetooth: Invalid header checksum [ 263.330548] Bluetooth: Invalid header checksum [ 263.344967] Bluetooth: Invalid header checksum [ 263.450281] Bluetooth: Invalid header checksum [ 263.455020] Bluetooth: Invalid header checksum [ 263.561670] Bluetooth: Invalid header checksum [ 263.569328] Bluetooth: Invalid header checksum [ 263.670415] Bluetooth: Invalid header checksum [ 263.678306] Bluetooth: Invalid header checksum 10:53:05 executing program 1: 10:53:05 executing program 5: 10:53:05 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:53:05 executing program 2: 10:53:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000380), 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:05 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad5429"], 0x32) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 263.781169] Bluetooth: Invalid header checksum [ 263.781183] Bluetooth: Invalid header checksum [ 263.821148] FAT-fs (loop3): bogus number of reserved sectors 10:53:05 executing program 2: 10:53:05 executing program 1: [ 263.827126] FAT-fs (loop3): Can't find a valid FAT filesystem 10:53:05 executing program 5: 10:53:05 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 263.891103] Bluetooth: Invalid header checksum [ 263.896000] Bluetooth: Invalid header checksum 10:53:05 executing program 1: 10:53:05 executing program 5: 10:53:05 executing program 2: [ 264.000522] Bluetooth: Invalid header checksum [ 264.000540] Bluetooth: Invalid header checksum 10:53:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:06 executing program 1: 10:53:06 executing program 5: [ 264.110479] Bluetooth: Invalid header checksum [ 264.121087] Bluetooth: Invalid header checksum [ 264.220795] Bluetooth: Invalid header checksum [ 264.230787] Bluetooth: Invalid header checksum [ 264.344485] Bluetooth: Invalid header checksum [ 264.349289] Bluetooth: Invalid header checksum [ 264.441858] Bluetooth: Invalid header checksum [ 264.461305] Bluetooth: Invalid header checksum [ 264.470280] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 264.478420] FAT-fs (loop0): Filesystem has been set read-only [ 264.487408] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 264.550486] Bluetooth: Invalid header checksum [ 264.570379] Bluetooth: Invalid header checksum 10:53:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000380), 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:06 executing program 1: 10:53:06 executing program 2: 10:53:06 executing program 5: 10:53:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:06 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad5429"], 0x32) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:06 executing program 2: [ 264.660493] Bluetooth: Invalid header checksum [ 264.682244] Bluetooth: Invalid header checksum 10:53:06 executing program 5: 10:53:06 executing program 1: 10:53:06 executing program 2: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[0::0],:47:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) [ 264.729943] FAT-fs (loop3): bogus number of reserved sectors [ 264.766543] FAT-fs (loop3): Can't find a valid FAT filesystem [ 264.774078] Bluetooth: Invalid header checksum [ 264.793658] Bluetooth: Invalid header checksum 10:53:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x622559e5) sendfile(r2, r2, 0x0, 0x20) 10:53:06 executing program 5: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000100)=""/144, 0x90) [ 264.855860] libceph: parse_ips bad ip '[0::0],:47' [ 264.880526] Bluetooth: Invalid header checksum [ 264.910885] Bluetooth: Invalid header checksum [ 264.990487] Bluetooth: Invalid header checksum [ 265.031588] Bluetooth: Invalid header checksum [ 265.100966] Bluetooth: Invalid header checksum [ 265.130482] Bluetooth: Invalid header checksum [ 265.210604] Bluetooth: Invalid header checksum [ 265.241491] Bluetooth: Invalid header checksum [ 265.259266] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 265.272770] FAT-fs (loop0): Filesystem has been set read-only [ 265.283484] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 265.320286] Bluetooth: Invalid header checksum [ 265.360746] Bluetooth: Invalid header checksum [ 265.430522] Bluetooth: Invalid header checksum 10:53:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{0x0}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000f0ffffffffffffff0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015c1cb6b5edcb54e7b022ccf3d48ffbc000000"], 0x1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 10:53:07 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000f0ffffffffffffff0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015c1cb6b5edcb54e7b022ccf3d48ffbc000000"], 0x1) 10:53:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") dup2(r1, r0) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x3}, 0x8) 10:53:07 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249"], 0x4b) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 265.470388] Bluetooth: Invalid header checksum [ 265.549001] Bluetooth: Invalid header checksum 10:53:07 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="455eb091e5fb02a45fcbf9c9c86a32e1286eb3c7ad5269a445080054d4895f2b465c739755737d47f3b1e0736602899f17bf0000d000e303dbb9e58bcd2f3e0be89ddaab8a8b69f73db261e3fe5719ee70dd176777dd3959c3031659eab8d6efefa19fd4997eb5385cda56bf00000000dfbd09b77b6ca811208ff55bba77fb9765cefa5fed297cc005b6b70de04cea4ccaaa13c0872eb3b3"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000293fe4fcffffffffffffff00000000000000000000000000432db7543a714ac81bc68d0dba93ede75753ef45d620d44cf8fd311327139481177f99e0e8a32f681663c6adfe53d08844211565e660d8a3a48284199313a03daa63b297abdee9c62b1b81e12d5831e44da1937fdb00e8f22a04b67e18fbdaf7c3bbeb851401f4b2cdcc3df71c524c3e9db5d0241b83cdde0af34eaa523e671bea91711ff7390590be5728e224933f50e71b250f"]) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet(0x2, 0x3, 0x1) io_setup(0x1, &(0x7f0000000300)) io_submit(0x0, 0x2, &(0x7f0000002a40)=[0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}]) 10:53:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x2b8, 0x41, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xb) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) 10:53:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 265.583849] Bluetooth: Invalid header checksum [ 265.589334] FAT-fs (loop3): bogus number of reserved sectors [ 265.611943] FAT-fs (loop3): Can't find a valid FAT filesystem [ 265.650481] Bluetooth: Invalid header checksum [ 265.692584] Bluetooth: Invalid header checksum 10:53:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 265.760381] Bluetooth: Invalid header checksum 10:53:07 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="455eb091e5fb02a45fcbf9c9c86a32e1286eb3c7ad5269a445080054d4895f2b465c739755737d47f3b1e0736602899f17bf0000d000e303dbb9e58bcd2f3e0be89ddaab8a8b69f73db261e3fe5719ee70dd176777dd3959c3031659eab8d6efefa19fd4997eb5385cda56bf00000000dfbd09b77b6ca811208ff55bba77fb9765cefa5fed297cc005b6b70de04cea4ccaaa13c0872eb3b3c137e24333f2fb56639d3152b48b800aab6ae592623565de144edc6513d1d6ca324ce2c1115fce75003dd47fa09588561701"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000293fe4fcffffffffffffff00000000000000000000000000432db7543a714ac81bc68d0dba93ede75753ef45d620d44cf8fd311327139481177f99e0e8a32f681663c6adfe53d08844211565e660d8a3a48284199313a03daa63b297abdee9c62b1b81e12d5831e44da1937fdb00e8f22a04b67e18fbdaf7c3bbeb851401f4b2cdcc3df71c524c3e9db5d0241b83cdde0af34eaa523e671bea91711ff7390590"]) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet(0x2, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000002a40)=[&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 265.810537] Bluetooth: Invalid header checksum [ 265.870780] Bluetooth: Invalid header checksum [ 265.930932] Bluetooth: Invalid header checksum [ 265.980508] Bluetooth: Invalid header checksum [ 266.040516] Bluetooth: Invalid header checksum [ 266.090286] Bluetooth: Invalid header checksum [ 266.105006] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 266.119915] FAT-fs (loop0): Filesystem has been set read-only [ 266.129630] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 266.154120] Bluetooth: Invalid header checksum [ 266.201855] Bluetooth: Invalid header checksum [ 266.260511] Bluetooth: Invalid header checksum [ 266.315098] Bluetooth: Invalid header checksum 10:53:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{0x0}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:08 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$P9_RWALK(r0, &(0x7f00000000c0)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x3}]}}, 0x16) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="455eb091e5fb02a45fcbf9c9c86a32e1286eb3c7ad5269a445080054d4895f2b465c739755737d47f3b1e0736602899f17bf0000d000e303dbb9e58bcd2f3e0be89ddaab8a8b69f73db261e3fe5719ee70dd176777dd3959c3031659eab8d6efefa19fd4997eb5385cda56bf00000000dfbd09b77b6ca811208ff55bba77fb9765cefa5fed297cc005b6b70de04cea4ccaaa13c0872eb3b3c137e24333f2fb56639d3152b48b800aab6ae592623565de144edc6513d1d6ca324ce2c1115fce75003dd47fa09588561701"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)=ANY=[]) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet(0x2, 0x3, 0x1) io_setup(0x1, &(0x7f0000000300)) io_submit(0x0, 0x2, &(0x7f0000002a40)=[0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}]) 10:53:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) 10:53:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:08 executing program 5: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffd9d}, 0x1033b) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r5, 0x4, 0x40400) write$FUSE_WRITE(r5, &(0x7f0000000240)={0x18}, 0x18) fcntl$setstatus(r2, 0x4, 0x6100) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendto(r6, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 10:53:08 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249"], 0x4b) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 266.385024] Bluetooth: Invalid header checksum [ 266.421947] Bluetooth: Invalid header checksum 10:53:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846"], 0x57) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 266.495888] Bluetooth: Invalid header checksum [ 266.518356] FAT-fs (loop3): bogus number of reserved sectors [ 266.530464] Bluetooth: Invalid header checksum 10:53:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:08 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 266.570627] FAT-fs (loop3): Can't find a valid FAT filesystem [ 266.601146] Bluetooth: Invalid header checksum [ 266.641079] Bluetooth: Invalid header checksum 10:53:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 266.712293] Bluetooth: Invalid header checksum [ 266.750705] Bluetooth: Invalid header checksum 10:53:08 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 266.821596] Bluetooth: Invalid header checksum [ 266.861276] Bluetooth: Invalid header checksum [ 266.905882] kvm_hv_set_msr: 4 callbacks suppressed [ 266.905894] kvm [10813]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 266.930900] Bluetooth: Invalid header checksum [ 266.967884] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 266.976724] Bluetooth: Invalid header checksum [ 266.981797] kvm [10813]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 266.991424] FAT-fs (loop0): Filesystem has been set read-only [ 266.997642] kvm [10813]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 267.014372] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 267.025183] kvm [10813]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 267.040729] Bluetooth: Invalid header checksum [ 267.080792] Bluetooth: Invalid header checksum [ 267.151619] Bluetooth: Invalid header checksum 10:53:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{0x0}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 267.193283] Bluetooth: Invalid header checksum 10:53:09 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) 10:53:09 executing program 5: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffd9d}, 0x1033b) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r5, 0x4, 0x40400) write$FUSE_WRITE(r5, &(0x7f0000000240)={0x18}, 0x18) fcntl$setstatus(r2, 0x4, 0x6100) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendto(r6, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 10:53:09 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249"], 0x4b) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 267.261901] Bluetooth: Invalid header checksum 10:53:09 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 267.301071] Bluetooth: Invalid header checksum [ 267.342420] FAT-fs (loop3): bogus number of reserved sectors [ 267.359611] kvm [10826]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 267.370422] Bluetooth: Invalid header checksum [ 267.391462] FAT-fs (loop3): Can't find a valid FAT filesystem [ 267.410465] Bluetooth: Invalid header checksum 10:53:09 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffd9d}, 0x1033b) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r5, 0x4, 0x40400) write$FUSE_WRITE(r5, &(0x7f0000000240)={0x18}, 0x18) fcntl$setstatus(r2, 0x4, 0x6100) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendto(r6, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 10:53:09 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 267.433146] kvm [10826]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 267.482061] Bluetooth: Invalid header checksum 10:53:09 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000001980)="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") [ 267.521297] Bluetooth: Invalid header checksum [ 267.528624] kvm [10826]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f 10:53:09 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 267.566099] kvm [10826]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 267.598136] Bluetooth: Invalid header checksum [ 267.631479] Bluetooth: Invalid header checksum 10:53:09 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) 10:53:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") unshare(0x400) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 267.700395] Bluetooth: Invalid header checksum [ 267.740794] Bluetooth: Invalid header checksum [ 267.789172] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 267.810425] FAT-fs (loop0): Filesystem has been set read-only [ 267.818737] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 267.829528] Bluetooth: Invalid header checksum [ 267.850332] Bluetooth: Invalid header checksum [ 267.921923] Bluetooth: Invalid header checksum [ 267.965011] Bluetooth: Invalid header checksum [ 268.030349] Bluetooth: Invalid header checksum 10:53:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:09 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) 10:53:09 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="455eb091e5fb02a45fcbf9c9c86a32e1286eb3c7ad5269a445080054d4895f2b465c739755737d47f3b1e0736602899f17bf0000d000e303dbb9e58bcd2f3e0be89ddaab8a8b69f73db261e3fe5719ee70dd176777dd3959c3031659eab8d6efefa19fd4997eb5385cda56bf00000000dfbd09b77b6ca811208ff55bba77fb9765cefa5fed297cc005b6b70de04cea4ccaaa13c0872eb3b3c137e24333f2fb56639d3152b48b800aab6ae592623565de144edc6513d1d6ca324ce2c1115fce75003dd47fa09588561701"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000293fe4fcffffffffffffff00000000000000000000000000432db7543a714ac81bc68d0dba93ede75753ef45d620d44cf8fd311327139481177f99e0e8a32f681663c6adfe53d08844211565e660d8a3a48284199313a03daa63b297abdee9c62b1b81e12d5831e44da1937fdb00e8f22a04b67e18fbdaf7c3bbeb851401f4b2cdcc3df71c524c3e9db5d0241b83cdde0af34eaa523e671bea91711ff7390590"]) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet(0x2, 0x3, 0x1) io_setup(0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000002a40)=[0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}]) 10:53:09 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846"], 0x57) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737"], 0x38) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 268.070385] Bluetooth: Invalid header checksum 10:53:10 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 268.145046] Bluetooth: Invalid header checksum [ 268.156960] kvm [10874]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 268.186629] FAT-fs (loop3): bogus number of reserved sectors [ 268.189214] Bluetooth: Invalid header checksum [ 268.209812] FAT-fs (loop3): Can't find a valid FAT filesystem [ 268.217677] kvm [10874]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000004 data 0x4d00000000f [ 268.250881] Bluetooth: Invalid header checksum [ 268.292546] Bluetooth: Invalid header checksum 10:53:10 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) 10:53:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b"], 0x3f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 268.360931] Bluetooth: Invalid header checksum [ 268.400549] Bluetooth: Invalid header checksum [ 268.472184] Bluetooth: Invalid header checksum 10:53:10 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 268.510928] Bluetooth: Invalid header checksum 10:53:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 268.580906] Bluetooth: Invalid header checksum [ 268.620447] Bluetooth: Invalid header checksum [ 268.661280] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 268.701149] Bluetooth: Invalid header checksum [ 268.710676] FAT-fs (loop0): Filesystem has been set read-only [ 268.730701] Bluetooth: Invalid header checksum [ 268.756547] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 268.810661] Bluetooth: Invalid header checksum [ 268.840728] Bluetooth: Invalid header checksum [ 268.928798] Bluetooth: Invalid header checksum 10:53:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:10 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) 10:53:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249"], 0x4b) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737"], 0x38) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 268.950544] Bluetooth: Invalid header checksum 10:53:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 269.030702] Bluetooth: Invalid header checksum [ 269.061103] Bluetooth: Invalid header checksum [ 269.080278] FAT-fs (loop3): bogus number of reserved sectors 10:53:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 269.129123] FAT-fs (loop3): Can't find a valid FAT filesystem [ 269.150979] Bluetooth: Invalid header checksum 10:53:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 269.179515] Bluetooth: Invalid header checksum 10:53:11 executing program 5: syz_execute_func(&(0x7f0000000400)="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") syz_execute_func(&(0x7f0000000000)="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") 10:53:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 269.278331] Bluetooth: Invalid header checksum [ 269.282917] Bluetooth: Invalid header checksum [ 269.380496] Bluetooth: Invalid header checksum [ 269.392034] Bluetooth: Invalid header checksum 10:53:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) [ 269.490464] Bluetooth: Invalid header checksum [ 269.500621] Bluetooth: Invalid header checksum [ 269.600444] Bluetooth: Invalid header checksum [ 269.611232] Bluetooth: Invalid header checksum [ 269.710634] Bluetooth: Invalid header checksum [ 269.721306] Bluetooth: Invalid header checksum 10:53:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) 10:53:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:11 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249"], 0x4b) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 269.820883] Bluetooth: Invalid header checksum [ 269.831554] Bluetooth: Invalid header checksum [ 269.940935] Bluetooth: Invalid header checksum [ 269.941528] Bluetooth: Invalid header checksum [ 269.953469] FAT-fs (loop3): bogus number of reserved sectors [ 269.979086] FAT-fs (loop3): Can't find a valid FAT filesystem 10:53:12 executing program 1: syz_execute_func(&(0x7f0000000880)="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") syz_execute_func(0x0) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c366440f56c9660f3a16649c6700c4617b12e5712d41dfd049b6106f") syz_execute_func(&(0x7f0000000140)="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") 10:53:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) 10:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 270.050385] Bluetooth: Invalid header checksum [ 270.050436] Bluetooth: Invalid header checksum [ 270.162899] Bluetooth: Invalid header checksum [ 270.162911] Bluetooth: Invalid header checksum 10:53:12 executing program 2: syz_execute_func(&(0x7f0000000000)="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") futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:12 executing program 5: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x2900001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext4\x00', 0x0, 0x0) 10:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 270.270560] Bluetooth: Invalid header checksum [ 270.274399] Bluetooth: Invalid header checksum 10:53:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 10:53:12 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c74657300000000030000000000001100000054b46bfda6d6555ff8806cc7198f1f87e900000000000000000000000000000001cb33fb4e0fb0d8cbb51ea708aea0b8d5553bfb35735dfbba8ccd75fdb291e0cc6ca82dffb745870a6784098de861e8e2d0f19f4cfc7ca817eb870700000000000000a34d86eb4291c106a1d80906736c6a8c47ea7aa44fe0fec70e37282af81afb20950117700b947ac67683e1a7f50ec24f31c94de5f61516f359f5196b048d3a5e66a29e1dde84d91ade7c6f72095f914611f237fb1b53bfc0fde53bffb3663cab7bc19fe141179d33eba55b"], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r1, 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0080000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r3, 0x700, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r4 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0x225) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r6, &(0x7f0000000300), 0x7fff) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file0\x00') r7 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000b00)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) sync_file_range(r1, 0x9, 0x8000, 0x2) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 270.382120] Bluetooth: Invalid header checksum [ 270.387048] Bluetooth: Invalid header checksum [ 270.433660] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 270.483331] FAT-fs (loop0): Filesystem has been set read-only [ 270.490922] Bluetooth: Invalid header checksum [ 270.495612] Bluetooth: Invalid header checksum [ 270.530536] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 270.600748] Bluetooth: Invalid header checksum [ 270.605535] Bluetooth: Invalid header checksum 10:53:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x58b, 0x0) 10:53:12 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b"], 0x3f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:12 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c74657300000000030000000000001100000054b46bfda6d6555ff8806cc7198f1f87e900000000000000000000000000000001cb33fb4e0fb0d8cbb51ea708aea0b8d5553bfb35735dfbba8ccd75fdb291e0cc6ca82dffb745870a6784098de861e8e2d0f19f4cfc7ca817eb870700000000000000a34d86eb4291c106a1d80906736c6a8c47ea7aa44fe0fec70e37282af81afb20950117700b947ac67683e1a7f50ec24f31c94de5f61516f359f5196b048d3a5e66a29e1dde84d91ade7c6f72095f914611f237fb1b53bfc0fde53bffb3663cab7bc19fe141179d33eba55b"], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r1, 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0080000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r3, 0x700, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r4 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r4, 0x7, &(0x7f0000027000)={0x1}) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0x225) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r6, &(0x7f0000000300), 0x7fff) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file0\x00') r7 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000b00)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) sync_file_range(r1, 0x9, 0x8000, 0x2) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 270.710857] Bluetooth: Invalid header checksum [ 270.715565] Bluetooth: Invalid header checksum 10:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 270.778881] FAT-fs (loop3): bogus number of reserved sectors 10:53:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="01"]}) close(r2) close(0xffffffffffffffff) [ 270.820684] Bluetooth: Invalid header checksum [ 270.825572] Bluetooth: Invalid header checksum [ 270.836079] FAT-fs (loop3): Can't find a valid FAT filesystem [ 270.930794] Bluetooth: Invalid header checksum [ 270.935612] Bluetooth: Invalid header checksum [ 271.041058] Bluetooth: Invalid header checksum [ 271.041081] Bluetooth: Invalid header checksum [ 271.150600] Bluetooth: Invalid header checksum [ 271.155412] Bluetooth: Invalid header checksum 10:53:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") 10:53:13 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x426002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x330) close(r0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, r1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x1, 0x100000001}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000001c0)=0x7) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xa8ff, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 10:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:13 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) rt_sigprocmask(0x3, &(0x7f0000000000), 0x0, 0x8) [ 271.236656] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 271.260306] Bluetooth: Invalid header checksum [ 271.265051] Bluetooth: Invalid header checksum [ 271.276542] FAT-fs (loop0): Filesystem has been set read-only 10:53:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 271.317277] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 271.370355] Bluetooth: Invalid header checksum [ 271.390300] Bluetooth: Invalid header checksum [ 271.483951] Bluetooth: Invalid header checksum [ 271.502233] Bluetooth: Invalid header checksum 10:53:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:13 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b"], 0x3f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:13 executing program 5: clone(0x4105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000023) 10:53:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") 10:53:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="994a2ae92c02964c0f05bf00000020c4a37bf0c5e041e2e9c422e9aabb3c00000064f3460f1b2800000f383a9e02000000110f4e5bc4a265aa104b2636660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efc4c3194198ac77000007af6766f2ab440fec3f66400fea31660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc402712f358f0000000f9f3c6436b266450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca5536f347aab03a00a2f1fbfb766208cf") [ 271.591564] Bluetooth: Invalid header checksum [ 271.610466] Bluetooth: Invalid header checksum 10:53:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendto$inet(r0, &(0x7f00000000c0)="b226cca9837e3f5bf2af0e429bfd561857881daf07b77d8d0269e826028d02a2e16fe8d616eba67c6d6e5cd37c0fc7b9b009d2ed10e167fb044b932d5b4694e2d8de627f3b5d75d06c", 0x49, 0x80, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) [ 271.669308] FAT-fs (loop3): bogus number of reserved sectors [ 271.702481] Bluetooth: Invalid header checksum 10:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 271.720514] Bluetooth: Invalid header checksum [ 271.724063] FAT-fs (loop3): Can't find a valid FAT filesystem [ 271.810426] Bluetooth: Invalid header checksum [ 271.831495] Bluetooth: Invalid header checksum [ 271.920845] Bluetooth: Invalid header checksum [ 271.940289] Bluetooth: Invalid header checksum [ 272.030370] Bluetooth: Invalid header checksum [ 272.050385] Bluetooth: Invalid header checksum [ 272.085413] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 272.096995] FAT-fs (loop0): Filesystem has been set read-only [ 272.107216] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) 10:53:14 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x426002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x330) close(r0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, r1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x1, 0x100000001}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000001c0)=0x7) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xa8ff, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 10:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000280)="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") 10:53:14 executing program 5: syz_execute_func(&(0x7f0000000400)="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") syz_open_procfs(0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000240)="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") [ 272.141988] Bluetooth: Invalid header checksum [ 272.162220] Bluetooth: Invalid header checksum [ 272.251695] Bluetooth: Invalid header checksum [ 272.270708] Bluetooth: Invalid header checksum [ 272.360331] Bluetooth: Invalid header checksum 10:53:14 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b"], 0x3f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000280)="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") 10:53:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 272.410451] Bluetooth: Invalid header checksum [ 272.471748] Bluetooth: Invalid header checksum 10:53:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000280)="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") [ 272.492697] Bluetooth: Invalid header checksum [ 272.529134] FAT-fs (loop3): bogus number of reserved sectors [ 272.559740] FAT-fs (loop3): Can't find a valid FAT filesystem 10:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 272.580429] Bluetooth: Invalid header checksum [ 272.600326] Bluetooth: Invalid header checksum 10:53:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 272.691304] Bluetooth: Invalid header checksum [ 272.710309] Bluetooth: Invalid header checksum 10:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 272.800818] Bluetooth: Invalid header checksum [ 272.820800] Bluetooth: Invalid header checksum [ 272.910734] Bluetooth: Invalid header checksum [ 272.932538] Bluetooth: Invalid header checksum [ 272.977732] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 272.986142] FAT-fs (loop0): Filesystem has been set read-only 10:53:14 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x426002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x330) close(r0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, r1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x1, 0x100000001}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000001c0)=0x7) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xa8ff, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 10:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 273.021510] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 273.022350] Bluetooth: Invalid header checksum [ 273.041778] Bluetooth: Invalid header checksum 10:53:14 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x426002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='io.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x330) close(r0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, r1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x1, 0x100000001}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000001c0)=0x7) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xa8ff, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) [ 273.130645] Bluetooth: Invalid header checksum 10:53:15 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5a"], 0x45) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 273.151217] Bluetooth: Invalid header checksum [ 273.240308] Bluetooth: Invalid header checksum [ 273.261150] Bluetooth: Invalid header checksum 10:53:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 273.373602] Bluetooth: Invalid header checksum [ 273.373625] Bluetooth: Invalid header checksum 10:53:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 273.480822] Bluetooth: Invalid header checksum [ 273.482039] Bluetooth: Invalid header checksum [ 273.494394] FAT-fs (loop3): invalid media value (0x00) [ 273.499703] FAT-fs (loop3): Can't find a valid FAT filesystem 10:53:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 273.585984] Bluetooth: Invalid header checksum [ 273.602053] Bluetooth: Invalid header checksum 10:53:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 273.695445] Bluetooth: Invalid header checksum [ 273.710644] Bluetooth: Invalid header checksum 10:53:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 273.803902] Bluetooth: Invalid header checksum [ 273.826803] Bluetooth: Invalid header checksum [ 273.847064] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 273.857750] FAT-fs (loop0): Filesystem has been set read-only [ 273.884909] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) 10:53:15 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5a"], 0x45) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 273.893482] kvm_hv_set_msr: 14 callbacks suppressed [ 273.893495] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006d data 0x4d00000000f [ 273.908958] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0x4d00000000f [ 273.920462] Bluetooth: Invalid header checksum [ 273.938893] Bluetooth: Invalid header checksum 10:53:15 executing program 5: syz_execute_func(&(0x7f0000000480)="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") [ 273.952184] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 273.977561] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000041 data 0x4d00000000f 10:53:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec"], 0x4e) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 273.994101] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000f data 0x4d00000000f [ 274.013383] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000079 data 0x4d00000000f [ 274.020442] Bluetooth: Invalid header checksum [ 274.025474] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000047 data 0x4d00000000f [ 274.037717] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000015 data 0x4d00000000f [ 274.047852] Bluetooth: Invalid header checksum [ 274.047997] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007d data 0x4d00000000f [ 274.063852] kvm [11201]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004b data 0x4d00000000f [ 274.134438] Bluetooth: Invalid header checksum [ 274.151705] Bluetooth: Invalid header checksum 10:53:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 274.240461] Bluetooth: Invalid header checksum [ 274.260404] Bluetooth: Invalid header checksum [ 274.263045] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) 10:53:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 274.293733] FAT-fs (loop1): Filesystem has been set read-only [ 274.327038] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 10:53:16 executing program 1: pause() syz_execute_func(&(0x7f0000000480)="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") [ 274.350608] Bluetooth: Invalid header checksum [ 274.370535] Bluetooth: Invalid header checksum [ 274.401941] FAT-fs (loop3): invalid media value (0x00) 10:53:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 274.433091] FAT-fs (loop3): Can't find a valid FAT filesystem [ 274.460687] Bluetooth: Invalid header checksum 10:53:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 274.492390] Bluetooth: Invalid header checksum [ 274.572772] Bluetooth: Invalid header checksum [ 274.601622] Bluetooth: Invalid header checksum [ 274.616074] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 274.637868] FAT-fs (loop0): Filesystem has been set read-only [ 274.647707] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 10:53:16 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5a"], 0x45) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 274.681528] Bluetooth: Invalid header checksum [ 274.727770] Bluetooth: Invalid header checksum [ 274.790424] Bluetooth: Invalid header checksum 10:53:16 executing program 5: clone(0x4105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregset(0x11, r0, 0x0, 0x0) [ 274.824114] Bluetooth: Invalid header checksum [ 274.900484] Bluetooth: Invalid header checksum [ 274.940554] Bluetooth: Invalid header checksum 10:53:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.010711] Bluetooth: Invalid header checksum [ 275.062967] Bluetooth: Invalid header checksum [ 275.127021] Bluetooth: Invalid header checksum 10:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 275.176003] Bluetooth: Invalid header checksum [ 275.231412] Bluetooth: Invalid header checksum [ 275.244432] FAT-fs (loop3): invalid media value (0x00) [ 275.255718] FAT-fs (loop3): Can't find a valid FAT filesystem 10:53:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 275.280314] Bluetooth: Invalid header checksum [ 275.341872] Bluetooth: Invalid header checksum 10:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 275.392093] Bluetooth: Invalid header checksum 10:53:17 executing program 1: syz_execute_func(&(0x7f00000003c0)="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") syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c300029a000000803a8e16649c675100617b12e5c4c1dff89600c42211bc32d211c4421947a800000100c42271f78500000081") syz_execute_func(&(0x7f0000000040)="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") [ 275.450363] Bluetooth: Invalid header checksum [ 275.500444] Bluetooth: Invalid header checksum 10:53:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 275.561070] Bluetooth: Invalid header checksum 10:53:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="994a2ae92c02964c0f05bf00000020c4a37bf0c5e041e2e9c422e9aabb3c00000064f3460f1b2800000f383a9e02000000110f4e5bc4a265aa104b2636660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efc4c3194198ac77000007af6766f2ab440fec3f66400fea31660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc402712f358f0000000f9f3c6436b266450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca5536f347aab03a00a2f1fbfb766208cf") 10:53:17 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5"], 0x48) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 275.612171] Bluetooth: Invalid header checksum 10:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.676093] Bluetooth: Invalid header checksum 10:53:17 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) syz_execute_func(&(0x7f0000000240)="982cef0f050520d0f80791b0024141e2e996855b66f3430f10310fc4014e66f66d220fa0e5be34d1c4e1f8c421fc22eb66450f2d890b00000000006eba0dfe8c73885588a1c40fbbbbe201acac10000000808f294002b00b0000000f71d539f08171a38a806ebb57660f38f6aecd46fbaac4618de3c0740f2d9600000000cadcdc1d440f2b550142c4b65977318fad8fadfba1c9fb110f0f380483d70a000000") [ 275.736134] Bluetooth: Invalid header checksum [ 275.780407] Bluetooth: Invalid header checksum [ 275.840906] Bluetooth: Invalid header checksum 10:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.890478] Bluetooth: Invalid header checksum [ 275.951028] Bluetooth: Invalid header checksum [ 276.000915] Bluetooth: Invalid header checksum 10:53:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 276.075031] Bluetooth: Invalid header checksum [ 276.110410] Bluetooth: Invalid header checksum [ 276.140852] FAT-fs (loop3): invalid media value (0x00) [ 276.167398] FAT-fs (loop3): Can't find a valid FAT filesystem [ 276.178502] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 276.187355] Bluetooth: Invalid header checksum [ 276.189950] FAT-fs (loop0): Filesystem has been set read-only [ 276.199990] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) 10:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:18 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5"], 0x48) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 276.220586] Bluetooth: Invalid header checksum 10:53:18 executing program 1: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x2900001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[0::]],047:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) [ 276.312631] Bluetooth: Invalid header checksum [ 276.330357] Bluetooth: Invalid header checksum 10:53:18 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x4000000001) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x8000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d9056319041a000f00000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 276.401452] Bluetooth: Invalid header checksum [ 276.416277] libceph: parse_ips bad ip '[0::]],047' [ 276.437936] libceph: parse_ips bad ip '[0::]],047' [ 276.445653] Bluetooth: Invalid header checksum 10:53:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 276.510463] Bluetooth: Invalid header checksum [ 276.550705] Bluetooth: Invalid header checksum 10:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:18 executing program 1: syz_execute_func(&(0x7f00000003c0)="4a2be966420f72f0f5980f0578f3aec4a37bf0c50341e2e926b5c9f34a0f38f60128218d00a30000262ff342906646da4e3292221322131dd919dec4c6c100dc55b1e6172525000e818f470fc980008080e2859ed23c788fe97c810f69e08f4cbec5c4c2858c3f8fc4a1c573d1f6c4613fc21d9053c7abc401f8296504213e5377000043d9497dbf8259438f34b267f36ab40f68803000000056f20f5161c366410ffe3a16dbd56c0ff341ab00fe8f08e4a25600b1355809580900000081660fdf53098f49609a567bc4c4617b708cfa00000000007466dee450c1f043fe02d134e188dec43b7d0f18e4e4e4f43665660f73d8fcca30cac4017a7fc36467479c09912af3430f47bb00000000000045dc0ff30f1b470bf04781ae00100000f1000000c44258f313d800d800dd4805dfdf63a5b76e0b0ba17ae64295589cffffc3c4c27197a8820000004577cb0c0ce42ec4b1b57c1002020606b274c4410ff9720d838f09e89a5b00ddfafa485c835e2ec43e264f0faea05d419594c44115638b0c0000002cb18374fb0a07c40155f64e0666460fddc7eced36660f38058b97619236c421c96b82e2626320979747910002c1045c0b47cc47cc5c66420f1a436e2ef246e16d44800199bb00004242fbc9880c00c461b016a7df6900003422") syz_execute_func(&(0x7f00000000c0)="3666440f50f564ff0941c3c4e1a570f97300029a000000803a8e16649c675100617b12e5c4c1dff89600c42211bc32d211c4421947a8000001006f") syz_execute_func(&(0x7f0000000b00)="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") [ 276.620589] Bluetooth: Invalid header checksum [ 276.662369] Bluetooth: Invalid header checksum 10:53:18 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) syz_execute_func(&(0x7f0000000240)="982cef0f050520d0f80791b0024141e2e996855b66f3430f10310fc4014e66f66d220fa0e5be34d1c4e1f8c421fc22eb66450f2d890b00000000006eba0dfe8c73885588a1c40fbbbbe201acac10000000808f294002b00b0000000f71d539f08171a38a806ebb57660f38f6aecd46fbaac4618de3c0740f2d9600000000cadcdc1d440f2b550142c4b65977318fad8fadfba1c9fb110f0f380483d70a000000") [ 276.730471] Bluetooth: Invalid header checksum 10:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 276.770766] Bluetooth: Invalid header checksum [ 276.842996] Bluetooth: Invalid header checksum [ 276.880636] Bluetooth: Invalid header checksum 10:53:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 276.922629] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 276.931698] FAT-fs (loop0): Filesystem has been set read-only [ 276.948600] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 276.961064] Bluetooth: Invalid header checksum 10:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 276.990535] Bluetooth: Invalid header checksum 10:53:18 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5"], 0x48) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 277.053977] FAT-fs (loop3): invalid media value (0x00) [ 277.079936] FAT-fs (loop3): Can't find a valid FAT filesystem [ 277.089410] Bluetooth: Invalid header checksum [ 277.101590] Bluetooth: Invalid header checksum 10:53:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 277.200483] Bluetooth: Invalid header checksum [ 277.210492] Bluetooth: Invalid header checksum 10:53:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="994a2ae92c02964c0f05bf00000020c4a37bf0c5e041e2e9c422e9aabb3c00000064f3460f1b2800000f383a9e02000000110f4e5bc4a265aa104b2636660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efc4c3194198ac77000007af6766f2ab440fec3f66400fea31660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc402712f358f0000000f9f3c6436b266450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca5536f347aab03a00a2f1fbfb766208cf") [ 277.320449] Bluetooth: Invalid header checksum [ 277.325384] Bluetooth: Invalid header checksum [ 277.431802] Bluetooth: Invalid header checksum [ 277.436547] Bluetooth: Invalid header checksum 10:53:19 executing program 1: pause() syz_execute_func(&(0x7f00000000c0)="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") 10:53:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 277.542508] Bluetooth: Invalid header checksum [ 277.549063] Bluetooth: Invalid header checksum 10:53:19 executing program 5: syz_execute_func(&(0x7f0000000880)="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") syz_execute_func(&(0x7f00000002c0)="c4e379614832074a2be924b593980f053ef3aec4a37bf0c50141e2e90f683966d995f2144006262ff34290660f8fc978c65e1b1b63f1707802a60000f2d2c461fb12c736266765f241e109dc55b1e6250000c48251364669fa88008800859ecf491e2f16c2e54c80184cddcd2c718f56c42239b84900c442319ebb70fe6581f0430dc0b267f34cb4ba1c585641564105ba16f2aec4018dfafbc423c96cb83d000000fe7341ff500909660fc4c2799ff28f69609b5687a8e1430fae277cd8d8a1a12ad764b5c1c4213a5fc05fc18d308e8ed4f20f12e40000f440646666413a0f3830ca30ca5b4b0f38253d030000005f5f0221c82b032b0309c4417e6f9a0000802000c4c2801d6766660f38158a8e616d0d96c9e8e9368f684895a3000000803fad467c4700a59ad081819cd800f0092ddd8f0b00c4a17ae64295807b1cffd2fb2e36646466264683b9080000000d64e42e36b288e7aac4075e2ea20f6baf00c4e39978c4c2712e51f5414c598374fb0a07b3ddaccd58ededd71249e5a2a992af4c4e0b0ba151d092008000008047910002c1045c0b47cc47ccf92ff265460f940665002d08000000c40208f35824420fae06a75e0f4401a9bb000042c4414974ec893131fbdbc9") [ 277.651407] Bluetooth: Invalid header checksum [ 277.656261] Bluetooth: Invalid header checksum 10:53:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 277.727651] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 277.743619] FAT-fs (loop0): Filesystem has been set read-only [ 277.753864] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 277.762652] Bluetooth: Invalid header checksum [ 277.767356] Bluetooth: Invalid header checksum 10:53:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 277.871808] Bluetooth: Invalid header checksum [ 277.876537] Bluetooth: Invalid header checksum [ 277.941896] FAT-fs (loop3): invalid media value (0x00) [ 277.953267] FAT-fs (loop3): Can't find a valid FAT filesystem [ 277.980442] Bluetooth: Invalid header checksum 10:53:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 277.991351] Bluetooth: Invalid header checksum [ 278.090514] Bluetooth: Invalid header checksum [ 278.100367] Bluetooth: Invalid header checksum 10:53:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 278.200614] Bluetooth: Invalid header checksum [ 278.210690] Bluetooth: Invalid header checksum 10:53:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") 10:53:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 278.310801] Bluetooth: Invalid header checksum [ 278.325592] Bluetooth: Invalid header checksum [ 278.364750] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 278.396624] FAT-fs (loop0): Filesystem has been set read-only 10:53:20 executing program 1: pause() syz_execute_func(&(0x7f00000000c0)="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") 10:53:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 278.417255] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 278.427415] Bluetooth: Invalid header checksum [ 278.433710] Bluetooth: Invalid header checksum 10:53:20 executing program 5: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x2900001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[]::0],047:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) 10:53:20 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 278.531231] Bluetooth: Invalid header checksum [ 278.541804] Bluetooth: Invalid header checksum [ 278.607045] libceph: parse_ips bad ip '[]::0],047' [ 278.625370] libceph: parse_ips bad ip '[]::0],047' [ 278.645346] Bluetooth: Invalid header checksum [ 278.650476] Bluetooth: Invalid header checksum 10:53:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffd}, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 10:53:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") [ 278.759096] Bluetooth: Invalid header checksum [ 278.764183] Bluetooth: Invalid header checksum 10:53:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000280)="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") 10:53:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 278.847637] FAT-fs (loop3): invalid media value (0x00) [ 278.867521] Bluetooth: Invalid header checksum [ 278.882089] Bluetooth: Invalid header checksum [ 278.912927] FAT-fs (loop3): Can't find a valid FAT filesystem 10:53:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, 0x0) syz_execute_func(&(0x7f0000000280)="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") [ 278.975862] Bluetooth: Invalid header checksum [ 278.992986] Bluetooth: Invalid header checksum [ 279.080621] Bluetooth: Invalid header checksum [ 279.111467] Bluetooth: Invalid header checksum [ 279.150843] FAT-fs (loop0): error, invalid access to FAT (entry 0x000064ff) [ 279.177856] FAT-fs (loop0): Filesystem has been set read-only [ 279.195878] Bluetooth: Invalid header checksum [ 279.196440] FAT-fs (loop0): error, invalid access to FAT (entry 0x000064ff) [ 279.220385] Bluetooth: Invalid header checksum 10:53:21 executing program 1: pause() syz_execute_func(&(0x7f00000000c0)="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") 10:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, 0x0) syz_execute_func(&(0x7f0000000280)="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") 10:53:21 executing program 5: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x2900001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[0::0],047\n\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) 10:53:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 279.304899] Bluetooth: Invalid header checksum [ 279.331616] Bluetooth: Invalid header checksum [ 279.339730] ceph: device name is missing path (no : separator in [0::0],047 [ 279.339730] ) [ 279.357841] ceph: device name is missing path (no : separator in [0::0],047 [ 279.357841] ) [ 279.411102] Bluetooth: Invalid header checksum [ 279.441143] Bluetooth: Invalid header checksum [ 279.521775] Bluetooth: Invalid header checksum [ 279.555183] Bluetooth: Invalid header checksum 10:53:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, 0x0) syz_execute_func(&(0x7f0000000280)="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") 10:53:21 executing program 5: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x3f553e5) link(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)='./file1\x00') setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file3\x00', 0x0, 0x0, 0xfffffffffffffebb, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 279.630955] Bluetooth: Invalid header checksum [ 279.662078] Bluetooth: Invalid header checksum 10:53:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)) syz_execute_func(&(0x7f0000000280)="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") [ 279.684492] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 279.717096] FAT-fs (loop3): invalid media value (0x00) 10:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)) syz_execute_func(&(0x7f0000000280)="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") [ 279.740378] FAT-fs (loop0): Filesystem has been set read-only [ 279.741694] Bluetooth: Invalid header checksum [ 279.756860] FAT-fs (loop3): Can't find a valid FAT filesystem [ 279.770916] Bluetooth: Invalid header checksum [ 279.774302] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 279.850493] kvm_hv_set_msr: 1151 callbacks suppressed [ 279.850503] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006d data 0x4d00000000f [ 279.865002] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0x4d00000000f [ 279.866872] Bluetooth: Invalid header checksum [ 279.880992] Bluetooth: Invalid header checksum [ 279.899638] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 279.947954] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000041 data 0x4d00000000f [ 279.965195] Bluetooth: Invalid header checksum [ 279.990324] Bluetooth: Invalid header checksum [ 280.015927] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000f data 0x4d00000000f [ 280.045035] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000079 data 0x4d00000000f [ 280.067069] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000047 data 0x4d00000000f [ 280.077289] Bluetooth: Invalid header checksum [ 280.090399] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000015 data 0x4d00000000f [ 280.105589] Bluetooth: Invalid header checksum 10:53:22 executing program 1: pause() syz_execute_func(&(0x7f00000000c0)="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") 10:53:22 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1"], 0x49) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)) syz_execute_func(&(0x7f0000000280)="994a2ae92c02964c0f05bf00000020c4a37bf0c5e041e2e9c422e9aabb3c00000064f3460f1b2800000f383a9e02000000110f4e5bc4a265aa104b2636660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efc4c3194198ac77000007af6766f2ab440fec3f66400fea31660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc402712f358f0000000f9f3c6436b266450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca5536f347aab03a00a2f1fbfb766208cf") [ 280.112820] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007d data 0x4d00000000f [ 280.134340] kvm [11519]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004b data 0x4d00000000f [ 280.180331] Bluetooth: Invalid header checksum 10:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c12") syz_execute_func(&(0x7f0000000280)="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") [ 280.210496] Bluetooth: Invalid header checksum 10:53:22 executing program 5: rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000340)="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") 10:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c12") syz_execute_func(&(0x7f0000000280)="994a2ae92c02964c0f05bf00000020c4a37bf0c5e041e2e9c422e9aabb3c00000064f3460f1b2800000f383a9e02000000110f4e5bc4a265aa104b2636660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efc4c3194198ac77000007af6766f2ab440fec3f66400fea31660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc402712f358f0000000f9f3c6436b266450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca5536f347aab03a00a2f1fbfb766208cf") [ 280.290796] Bluetooth: Invalid header checksum [ 280.321051] Bluetooth: Invalid header checksum 10:53:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x80000000, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {0x7, 0xff, 0x5, 0x10001, 0xfffffffffffffff7, 0x2, 0x9, 0x7}, {0x3, 0x8, 0xb25b, 0x9}, 0x5bd2, 0x6e6bb0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@rand_addr="1f2b105d5149c54575caec75d51b4dea", 0x3503, 0x0, 0x1, 0x1f, 0x6, 0x400, 0xffff}}, 0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c12") syz_execute_func(&(0x7f0000000280)="994a2ae92c02964c0f05bf00000020c4a37bf0c5e041e2e9c422e9aabb3c00000064f3460f1b2800000f383a9e02000000110f4e5bc4a265aa104b2636660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efc4c3194198ac77000007af6766f2ab440fec3f66400fea31660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc402712f358f0000000f9f3c6436b266450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca5536f347aab03a00a2f1fbfb766208cf") [ 280.400371] Bluetooth: Invalid header checksum [ 280.430384] Bluetooth: Invalid header checksum [ 280.511102] Bluetooth: Invalid header checksum 10:53:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319b") syz_execute_func(&(0x7f0000000280)="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") 10:53:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 280.541512] Bluetooth: Invalid header checksum 10:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319b") syz_execute_func(&(0x7f0000000280)="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") [ 280.621197] Bluetooth: Invalid header checksum [ 280.634951] FAT-fs (loop3): invalid media value (0x00) [ 280.651123] Bluetooth: Invalid header checksum [ 280.674636] FAT-fs (loop3): Can't find a valid FAT filesystem [ 280.730333] Bluetooth: Invalid header checksum [ 280.761831] Bluetooth: Invalid header checksum [ 280.843034] Bluetooth: Invalid header checksum [ 280.871853] Bluetooth: Invalid header checksum [ 280.926543] audit: type=1400 audit(1556621602.817:53): avc: denied { sys_admin } for pid=11551 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 280.955051] Bluetooth: Invalid header checksum 10:53:22 executing program 1: syz_execute_func(&(0x7f00000000c0)="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") [ 280.981801] Bluetooth: Invalid header checksum 10:53:22 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1"], 0x49) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319b") syz_execute_func(&(0x7f0000000280)="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") 10:53:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 10:53:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd0") syz_execute_func(&(0x7f0000000280)="994a2ae92c02964c0f05bf00000020c4a37bf0c5e041e2e9c422e9aabb3c00000064f3460f1b2800000f383a9e02000000110f4e5bc4a265aa104b2636660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efc4c3194198ac77000007af6766f2ab440fec3f66400fea31660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc402712f358f0000000f9f3c6436b266450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca5536f347aab03a00a2f1fbfb766208cf") [ 281.060387] Bluetooth: Invalid header checksum 10:53:23 executing program 1: syz_execute_func(&(0x7f00000000c0)="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") [ 281.090567] Bluetooth: Invalid header checksum 10:53:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd0") syz_execute_func(&(0x7f0000000280)="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") [ 281.174748] Bluetooth: Invalid header checksum [ 281.200606] Bluetooth: Invalid header checksum [ 281.281857] Bluetooth: Invalid header checksum [ 281.327897] Bluetooth: Invalid header checksum 10:53:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 10:53:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:53:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd0") syz_execute_func(&(0x7f0000000280)="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") 10:53:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:23 executing program 1: syz_execute_func(&(0x7f00000000c0)="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") [ 281.390365] Bluetooth: Invalid header checksum [ 281.434148] Bluetooth: Invalid header checksum [ 281.501138] Bluetooth: Invalid header checksum [ 281.540841] Bluetooth: Invalid header checksum [ 281.612116] Bluetooth: Invalid header checksum [ 281.650277] Bluetooth: Invalid header checksum [ 281.720558] Bluetooth: Invalid header checksum [ 281.761070] Bluetooth: Invalid header checksum [ 281.830378] Bluetooth: Invalid header checksum [ 281.870420] Bluetooth: Invalid header checksum 10:53:23 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1"], 0x49) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:23 executing program 1: pause() syz_execute_func(0x0) 10:53:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(0x0) 10:53:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 10:53:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 281.942590] Bluetooth: Invalid header checksum 10:53:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(0x0) [ 281.984563] Bluetooth: Invalid header checksum 10:53:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:53:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(0x0) [ 282.050425] Bluetooth: Invalid header checksum [ 282.101416] Bluetooth: Invalid header checksum [ 282.173673] Bluetooth: Invalid header checksum [ 282.215471] Bluetooth: Invalid header checksum 10:53:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 282.270410] Bluetooth: Invalid header checksum 10:53:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffffbc, 0x0, 0x0, 0x0, 0x0, 0xffffffb5}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) [ 282.321127] Bluetooth: Invalid header checksum 10:53:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 282.380437] Bluetooth: Invalid header checksum [ 282.430803] Bluetooth: Invalid header checksum [ 282.492010] Bluetooth: Invalid header checksum [ 282.554395] Bluetooth: Invalid header checksum [ 282.600833] Bluetooth: Invalid header checksum [ 282.665051] Bluetooth: Invalid header checksum [ 282.711569] Bluetooth: Invalid header checksum [ 282.770353] Bluetooth: Invalid header checksum [ 282.828323] Bluetooth: Invalid header checksum 10:53:24 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) epoll_create(0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 10:53:24 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) 10:53:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000040)="1c0db5b598cd801b69e4f56962f5696200d9d9d017795b69f9f9680c0000008fe9589b26c7e4c753fbc442f3f3f1fed4f47d82663ed107c4c2b90a23f216657051c422b18cb6070000005151ccc4a27d181e1eea01eff265dc5f002ebb420fc37d10105bc4c3bd688da9ce00008baf35af353541000f9a9999030faee42c240f54635bde3ef3407104a1e1e0ef26400f0d18c401fe5ff6e30fad6736660fd2938c000000c4c1f913376666450f17720d2e440fc7bf0d00008066660f3a0b0865") 10:53:24 executing program 1: pause() syz_execute_func(0x0) [ 282.884422] Bluetooth: Invalid header checksum 10:53:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pwrite64(r1, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 282.931106] Bluetooth: Invalid header checksum [ 283.001913] Bluetooth: Invalid header checksum 10:53:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) epoll_create(0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 283.042974] Bluetooth: Invalid header checksum [ 283.111197] Bluetooth: Invalid header checksum [ 283.125915] FAT-fs (loop0): error, invalid access to FAT (entry 0x000064ff) [ 283.150376] Bluetooth: Invalid header checksum [ 283.161002] FAT-fs (loop0): Filesystem has been set read-only [ 283.185762] FAT-fs (loop0): error, invalid access to FAT (entry 0x000064ff) 10:53:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) [ 283.221425] Bluetooth: Invalid header checksum 10:53:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pwrite64(r1, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 283.260618] Bluetooth: Invalid header checksum 10:53:25 executing program 5: syz_execute_func(&(0x7f0000000000)="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") futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) [ 283.330529] Bluetooth: Invalid header checksum [ 283.373442] Bluetooth: Invalid header checksum [ 283.451781] Bluetooth: Invalid header checksum [ 283.483110] Bluetooth: Invalid header checksum 10:53:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pwrite64(r1, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 283.561894] Bluetooth: Invalid header checksum [ 283.591762] Bluetooth: Invalid header checksum 10:53:25 executing program 1: pause() syz_execute_func(0x0) [ 283.672389] Bluetooth: Invalid header checksum [ 283.701015] Bluetooth: Invalid header checksum [ 283.783011] Bluetooth: Invalid header checksum 10:53:25 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) [ 283.810762] Bluetooth: Invalid header checksum [ 283.890351] Bluetooth: Invalid header checksum [ 283.921078] Bluetooth: Invalid header checksum 10:53:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) pwrite64(r1, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 284.002092] Bluetooth: Invalid header checksum [ 284.032917] Bluetooth: Invalid header checksum [ 284.111825] Bluetooth: Invalid header checksum [ 284.149053] Bluetooth: Invalid header checksum 10:53:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 284.220629] Bluetooth: Invalid header checksum 10:53:26 executing program 5: syz_execute_func(&(0x7f0000000000)="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") futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) [ 284.251473] Bluetooth: Invalid header checksum 10:53:26 executing program 4: syz_execute_func(&(0x7f00000003c0)="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") syz_genetlink_get_family_id$fou(0x0) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c300029a000000803a8e16649c675100617b12e5c4c1dff89600c42211bc32d211c4421947a800000100c42271f78500000081") syz_execute_func(&(0x7f0000000040)="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") [ 284.331714] Bluetooth: Invalid header checksum [ 284.360905] Bluetooth: Invalid header checksum 10:53:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(0x0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 284.397520] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 284.409322] FAT-fs (loop0): Filesystem has been set read-only [ 284.416197] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 284.440357] Bluetooth: Invalid header checksum [ 284.471052] Bluetooth: Invalid header checksum [ 284.551705] Bluetooth: Invalid header checksum [ 284.580789] Bluetooth: Invalid header checksum 10:53:26 executing program 1: syz_execute_func(&(0x7f00000003c0)="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") syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c3c4e1a570f97300029a000000803a8e16649c6751e820637b7be5e5c4c1dff89600c42211bc32d211c4421947a8000001006f") syz_execute_func(&(0x7f0000000e00)="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") 10:53:26 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) 10:53:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 284.675292] Bluetooth: Invalid header checksum [ 284.675305] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 284.675314] FAT-fs (loop0): Filesystem has been set read-only [ 284.694630] Bluetooth: Invalid header checksum [ 284.695297] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 284.782083] Bluetooth: Invalid header checksum [ 284.803401] Bluetooth: Invalid header checksum [ 284.894221] Bluetooth: Invalid header checksum [ 284.910332] Bluetooth: Invalid header checksum 10:53:26 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 284.963050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 284.971730] FAT-fs (loop0): Filesystem has been set read-only [ 284.982892] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 285.004954] Bluetooth: Invalid header checksum [ 285.021148] Bluetooth: Invalid header checksum 10:53:27 executing program 5: syz_execute_func(&(0x7f0000000000)="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") futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) [ 285.111622] Bluetooth: Invalid header checksum [ 285.130636] Bluetooth: Invalid header checksum 10:53:27 executing program 4: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x2900001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='[0::0],047'], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext4\x00', 0x0, &(0x7f0000000180)='\x00') [ 285.221058] Bluetooth: Invalid header checksum [ 285.249410] Bluetooth: Invalid header checksum 10:53:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f0000000140)=0x40000000000009) set_mempolicy(0x0, &(0x7f0000000380)=0x405, 0x76) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r1, 0x402, 0x80000020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7e, 0x400000000001, 0x3, 0x0, r3, 0xfffffffffffffffc}, 0x2c) getegid() ioctl$UI_DEV_DESTROY(r4, 0x5502) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000200)=[{0x9, 0x6, 0x0, 0x10001}, {0x5, 0x80000001, 0x1, 0x4}, {0x9, 0x3ff, 0x3, 0x2}]}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) 10:53:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(0x0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 285.273286] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 285.284773] FAT-fs (loop0): Filesystem has been set read-only [ 285.291635] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) 10:53:27 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 285.337361] Bluetooth: Invalid header checksum [ 285.353519] Bluetooth: Invalid header checksum [ 285.441581] Bluetooth: Invalid header checksum [ 285.462663] Bluetooth: Invalid header checksum 10:53:27 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) [ 285.550578] Bluetooth: Invalid header checksum [ 285.574980] Bluetooth: Invalid header checksum 10:53:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f0000000140)=0x40000000000009) set_mempolicy(0x0, &(0x7f0000000380)=0x405, 0x76) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r1, 0x402, 0x80000020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7e, 0x400000000001, 0x3, 0x0, r3, 0xfffffffffffffffc}, 0x2c) getegid() ioctl$UI_DEV_DESTROY(r4, 0x5502) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000200)=[{0x9, 0x6, 0x0, 0x10001}, {0x5, 0x80000001, 0x1, 0x4}, {0x9, 0x3ff, 0x3, 0x2}]}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) 10:53:27 executing program 1: [ 285.595540] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 285.630742] FAT-fs (loop0): Filesystem has been set read-only 10:53:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 285.662776] Bluetooth: Invalid header checksum [ 285.667733] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 285.680309] Bluetooth: Invalid header checksum 10:53:27 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 285.773590] Bluetooth: Invalid header checksum [ 285.805526] Bluetooth: Invalid header checksum 10:53:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f0000000140)=0x40000000000009) set_mempolicy(0x0, &(0x7f0000000380)=0x405, 0x76) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r1, 0x402, 0x80000020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7e, 0x400000000001, 0x3, 0x0, r3, 0xfffffffffffffffc}, 0x2c) getegid() ioctl$UI_DEV_DESTROY(r4, 0x5502) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000200)=[{0x9, 0x6, 0x0, 0x10001}, {0x5, 0x80000001, 0x1, 0x4}, {0x9, 0x3ff, 0x3, 0x2}]}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) [ 285.880580] Bluetooth: Invalid header checksum [ 285.907276] Bluetooth: Invalid header checksum 10:53:27 executing program 5: syz_execute_func(&(0x7f0000000000)="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") futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 286.001117] Bluetooth: Invalid header checksum [ 286.011035] Bluetooth: Invalid header checksum 10:53:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 286.079986] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 286.088849] FAT-fs (loop0): Filesystem has been set read-only [ 286.100376] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 286.110350] Bluetooth: Invalid header checksum [ 286.120600] Bluetooth: Invalid header checksum [ 286.225225] Bluetooth: Invalid header checksum [ 286.230342] Bluetooth: Invalid header checksum 10:53:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(0x0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:28 executing program 1: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x2900001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="5b303a3a305ddf3034373a"], 0x0, &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000040)={0x3, 0x0, 0x2001, 0x7, 0x1, {0x2c, 0x10000}}) [ 286.292791] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 286.300912] FAT-fs (loop0): Filesystem has been set read-only [ 286.318994] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 286.332804] Bluetooth: Invalid header checksum [ 286.341701] Bluetooth: Invalid header checksum 10:53:28 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) read(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x1) 10:53:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f0000000140)=0x40000000000009) set_mempolicy(0x0, &(0x7f0000000380)=0x405, 0x76) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r1, 0x402, 0x80000020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7e, 0x400000000001, 0x3, 0x0, r3, 0xfffffffffffffffc}, 0x2c) getegid() ioctl$UI_DEV_DESTROY(r4, 0x5502) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000200)=[{0x9, 0x6, 0x0, 0x10001}, {0x5, 0x80000001, 0x1, 0x4}, {0x9, 0x3ff, 0x3, 0x2}]}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) 10:53:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 10:53:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 286.450348] Bluetooth: Invalid header checksum [ 286.450443] Bluetooth: Invalid header checksum 10:53:28 executing program 1: syz_execute_func(&(0x7f00000003c0)="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") syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c3c4e1a570f97300029a000000803a8e16649c6751e820637b7be5e5c4c1dff89600c42211bc32d211c4421947a8000001006f") syz_execute_func(&(0x7f0000000500)="f3460f1bef4a2be93699980f053ef3aec4a37bf0c50341e2e92695c9f2abc421b8c25cb100008d3581810000262f7946d9f96646da4e32c4c2b9b6b9000000000069dec461c44299ae4000e617c422558e24d50f000000470f9080008047f03acf8fe97c810f69e08f4cbec5c4c2858c3f2d56c4613f3ac21d7290c7ab86c4a51313000043d9497d410fa9a642853e00c3c30f3a603d06f0ffff00c4e16d71d4d2564105ba16f2aed9fd01ebf5eba225adeab413c4c37d096208c2c481fa706b00f9ef0008c481b1f39f0d00000065020000b150400f381da900e001f0428155fdd2cb0000c6d59134ffffff66dee440dcfb3646d39bce00000091047b8f49580197feffff7f4080a009210000df12e400f4260fe88c420000000064460f006a076190410add6104f3451f337b6b0000912af3430fc4c17829c8c463ad0b5890ca6c0f84500000006466420f3a0b0100d8008fe978cce16a85859e6d6d8175759d8f00660f3830c8c462a52b6e0b84a17a423895f0f0839200000080a79cffffc3bd7c6d8300af77cb44cb44e42ec4a17c10020f1541220606b2aa81380010c4026726670f010e0f7e54880d07c40155f64e0638ecec687b0a49fcfc82e26236f3440f7f1797972ec1048e5c0b5c0b5c670f0d5b0064450fe242c481635a9c70d3813811fa174e484e40c91b41fc9d1b1b0fadd5818a2b233333fdffff7f45ee880c0000008fc97881b500000000") [ 286.561030] Bluetooth: Invalid header checksum [ 286.565721] Bluetooth: Invalid header checksum [ 286.619658] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 286.641613] FAT-fs (loop0): Filesystem has been set read-only [ 286.651090] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 10:53:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:28 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)) [ 286.670344] Bluetooth: Invalid header checksum [ 286.670578] Bluetooth: Invalid header checksum [ 286.780417] Bluetooth: Invalid header checksum [ 286.791938] Bluetooth: Invalid header checksum 10:53:28 executing program 5: syz_execute_func(&(0x7f0000000000)="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") 10:53:28 executing program 4: 10:53:28 executing program 4: [ 286.898634] Bluetooth: Invalid header checksum [ 286.910577] Bluetooth: Invalid header checksum [ 286.959565] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 286.985797] FAT-fs (loop0): Filesystem has been set read-only [ 287.000995] Bluetooth: Invalid header checksum [ 287.006817] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 287.021861] Bluetooth: Invalid header checksum [ 287.111076] Bluetooth: Invalid header checksum [ 287.130356] Bluetooth: Invalid header checksum 10:53:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:29 executing program 4: [ 287.220381] Bluetooth: Invalid header checksum 10:53:29 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) read(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x1) 10:53:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:29 executing program 4: [ 287.240588] Bluetooth: Invalid header checksum 10:53:29 executing program 4: [ 287.330678] Bluetooth: Invalid header checksum [ 287.351944] Bluetooth: Invalid header checksum [ 287.419220] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 287.428996] FAT-fs (loop0): Filesystem has been set read-only [ 287.439379] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 287.447017] Bluetooth: Invalid header checksum 10:53:29 executing program 1: 10:53:29 executing program 4: 10:53:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) [ 287.465236] Bluetooth: Invalid header checksum [ 287.550421] Bluetooth: Invalid header checksum [ 287.582543] Bluetooth: Invalid header checksum [ 287.660818] Bluetooth: Invalid header checksum 10:53:29 executing program 5: syz_execute_func(&(0x7f0000000000)="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") 10:53:29 executing program 4: 10:53:29 executing program 1: [ 287.697264] Bluetooth: Invalid header checksum [ 287.773093] Bluetooth: Invalid header checksum [ 287.806367] Bluetooth: Invalid header checksum [ 287.880624] Bluetooth: Invalid header checksum [ 287.910330] Bluetooth: Invalid header checksum [ 287.990515] Bluetooth: Invalid header checksum [ 288.030653] Bluetooth: Invalid header checksum [ 288.100291] Bluetooth: Invalid header checksum 10:53:30 executing program 1: 10:53:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) 10:53:30 executing program 4: 10:53:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:30 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) read(0xffffffffffffffff, &(0x7f0000000040)=""/19, 0x1) 10:53:30 executing program 1: [ 288.152784] Bluetooth: Invalid header checksum 10:53:30 executing program 4: 10:53:30 executing program 1: 10:53:30 executing program 4: [ 288.211796] Bluetooth: Invalid header checksum [ 288.276926] Bluetooth: Invalid header checksum [ 288.320960] Bluetooth: Invalid header checksum [ 288.380759] Bluetooth: Invalid header checksum [ 288.430435] Bluetooth: Invalid header checksum [ 288.490336] Bluetooth: Invalid header checksum 10:53:30 executing program 5: syz_execute_func(&(0x7f0000000000)="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") 10:53:30 executing program 4: 10:53:30 executing program 1: 10:53:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) [ 288.540510] Bluetooth: Invalid header checksum 10:53:30 executing program 4: 10:53:30 executing program 1: [ 288.600698] Bluetooth: Invalid header checksum [ 288.651234] Bluetooth: Invalid header checksum [ 288.713142] Bluetooth: Invalid header checksum [ 288.761235] Bluetooth: Invalid header checksum [ 288.820425] Bluetooth: Invalid header checksum [ 288.870378] Bluetooth: Invalid header checksum [ 288.930490] Bluetooth: Invalid header checksum [ 288.980363] Bluetooth: Invalid header checksum [ 289.050462] Bluetooth: Invalid header checksum 10:53:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:31 executing program 4: 10:53:31 executing program 1: 10:53:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) 10:53:31 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) [ 289.090291] Bluetooth: Invalid header checksum 10:53:31 executing program 1: [ 289.160716] Bluetooth: Invalid header checksum [ 289.200373] Bluetooth: Invalid header checksum [ 289.270580] Bluetooth: Invalid header checksum [ 289.310686] Bluetooth: Invalid header checksum 10:53:31 executing program 5: syz_execute_func(0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:31 executing program 4: 10:53:31 executing program 1: 10:53:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) [ 289.380428] Bluetooth: Invalid header checksum 10:53:31 executing program 4: [ 289.421901] Bluetooth: Invalid header checksum 10:53:31 executing program 1: [ 289.492135] Bluetooth: Invalid header checksum [ 289.540775] Bluetooth: Invalid header checksum [ 289.610397] Bluetooth: Invalid header checksum [ 289.646088] Bluetooth: Invalid header checksum [ 289.720536] Bluetooth: Invalid header checksum [ 289.751334] Bluetooth: Invalid header checksum [ 289.830373] Bluetooth: Invalid header checksum [ 289.860330] Bluetooth: Invalid header checksum [ 289.941747] Bluetooth: Invalid header checksum [ 289.970543] Bluetooth: Invalid header checksum 10:53:31 executing program 1: 10:53:31 executing program 4: 10:53:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) 10:53:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:31 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) [ 290.050349] Bluetooth: Invalid header checksum 10:53:31 executing program 4: [ 290.084093] Bluetooth: Invalid header checksum [ 290.161106] Bluetooth: Invalid header checksum [ 290.190744] Bluetooth: Invalid header checksum 10:53:32 executing program 5: syz_execute_func(0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:32 executing program 1: 10:53:32 executing program 4: 10:53:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 290.271735] Bluetooth: Invalid header checksum 10:53:32 executing program 1: 10:53:32 executing program 4: 10:53:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 290.300541] Bluetooth: Invalid header checksum 10:53:32 executing program 4: 10:53:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 10:53:32 executing program 1: [ 290.381838] Bluetooth: Invalid header checksum [ 290.411287] Bluetooth: Invalid header checksum [ 290.500379] Bluetooth: Invalid header checksum [ 290.522042] Bluetooth: Invalid header checksum [ 290.601527] Bluetooth: Invalid header checksum [ 290.631587] Bluetooth: Invalid header checksum [ 290.720432] Bluetooth: Invalid header checksum [ 290.740284] Bluetooth: Invalid header checksum [ 290.830518] Bluetooth: Invalid header checksum [ 290.850461] Bluetooth: Invalid header checksum 10:53:32 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) 10:53:32 executing program 4: [ 290.940722] Bluetooth: Invalid header checksum [ 290.961148] Bluetooth: Invalid header checksum 10:53:33 executing program 5: syz_execute_func(0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:33 executing program 1: 10:53:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 10:53:33 executing program 4: [ 291.050342] Bluetooth: Invalid header checksum [ 291.070349] Bluetooth: Invalid header checksum 10:53:33 executing program 1: 10:53:33 executing program 4: 10:53:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 291.162702] Bluetooth: Invalid header checksum [ 291.181587] Bluetooth: Invalid header checksum 10:53:33 executing program 1: 10:53:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x0) [ 291.270384] Bluetooth: Invalid header checksum [ 291.310482] Bluetooth: Invalid header checksum [ 291.380607] Bluetooth: Invalid header checksum [ 291.400758] Bluetooth: Invalid header checksum [ 291.490370] Bluetooth: Invalid header checksum [ 291.510519] Bluetooth: Invalid header checksum [ 291.600838] Bluetooth: Invalid header checksum [ 291.630362] Bluetooth: Invalid header checksum 10:53:33 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r1 = dup3(0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000040)=""/19, 0x1) 10:53:33 executing program 4: [ 291.710558] Bluetooth: Invalid header checksum [ 291.745217] Bluetooth: Invalid header checksum [ 291.820422] Bluetooth: Invalid header checksum [ 291.850274] Bluetooth: Invalid header checksum 10:53:33 executing program 5: syz_execute_func(&(0x7f0000000000)="994a2ae92c02b64c0f05bf08000000c4a37bf0c5e041e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:33 executing program 1: 10:53:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x0) 10:53:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:33 executing program 4: [ 291.930364] Bluetooth: Invalid header checksum 10:53:33 executing program 1: 10:53:33 executing program 4: [ 291.960872] Bluetooth: Invalid header checksum 10:53:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 292.040521] Bluetooth: Invalid header checksum 10:53:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e2"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x0) 10:53:34 executing program 4: [ 292.071195] Bluetooth: Invalid header checksum [ 292.150455] Bluetooth: Invalid header checksum [ 292.183817] Bluetooth: Invalid header checksum [ 292.260407] Bluetooth: Invalid header checksum [ 292.292922] Bluetooth: Invalid header checksum [ 292.374743] Bluetooth: Invalid header checksum [ 292.400381] Bluetooth: Invalid header checksum [ 292.480297] Bluetooth: Invalid header checksum 10:53:34 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r1 = dup3(0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000040)=""/19, 0x1) 10:53:34 executing program 1: [ 292.510380] Bluetooth: Invalid header checksum [ 292.600452] Bluetooth: Invalid header checksum [ 292.620354] Bluetooth: Invalid header checksum [ 292.710432] Bluetooth: Invalid header checksum [ 292.730288] Bluetooth: Invalid header checksum 10:53:34 executing program 5: syz_execute_func(&(0x7f0000000000)="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") futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:34 executing program 4: 10:53:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:34 executing program 0: 10:53:34 executing program 1: 10:53:34 executing program 1: 10:53:34 executing program 0: 10:53:34 executing program 4: [ 292.832028] Bluetooth: Invalid header checksum [ 292.840541] Bluetooth: Invalid header checksum 10:53:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:34 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) [ 292.941561] Bluetooth: Invalid header checksum [ 292.950823] Bluetooth: Invalid header checksum [ 293.050557] Bluetooth: Invalid header checksum [ 293.060587] Bluetooth: Invalid header checksum [ 293.160331] Bluetooth: Invalid header checksum [ 293.170726] Bluetooth: Invalid header checksum [ 293.270454] Bluetooth: Invalid header checksum [ 293.280345] Bluetooth: Invalid header checksum 10:53:35 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r1 = dup3(0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000040)=""/19, 0x1) 10:53:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0), 0x962be977, 0x60, 0x0, 0x184) [ 293.386338] Bluetooth: Invalid header checksum [ 293.390353] Bluetooth: Invalid header checksum [ 293.500404] Bluetooth: Invalid header checksum [ 293.501045] Bluetooth: Invalid header checksum 10:53:35 executing program 5: syz_execute_func(&(0x7f0000000000)="994a2ae92c02b64c0f05bf08000000c4a37bf0c5e041e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:35 executing program 1: 10:53:35 executing program 0: 10:53:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec0846abae8d38c5"], 0x5c) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:35 executing program 4: 10:53:35 executing program 4: 10:53:35 executing program 1: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2) [ 293.610463] Bluetooth: Invalid header checksum [ 293.615296] Bluetooth: Invalid header checksum 10:53:35 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() pipe(&(0x7f0000000340)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200), 0x0) 10:53:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:53:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 293.720784] Bluetooth: Invalid header checksum [ 293.726808] Bluetooth: Invalid header checksum [ 293.841762] Bluetooth: Invalid header checksum [ 293.846511] Bluetooth: Invalid header checksum [ 293.940799] Bluetooth: Invalid header checksum [ 293.940813] Bluetooth: Invalid header checksum [ 294.050451] Bluetooth: Invalid header checksum [ 294.050465] Bluetooth: Invalid header checksum 10:53:36 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) 10:53:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf32(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r0], 0x1006) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 294.160384] Bluetooth: Invalid header checksum [ 294.170485] Bluetooth: Invalid header checksum [ 294.280428] Bluetooth: Invalid header checksum [ 294.284556] Bluetooth: Invalid header checksum 10:53:36 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x81, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x1000000000016) syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') 10:53:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:36 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() pipe(&(0x7f0000000340)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20600) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 294.390307] Bluetooth: Invalid header checksum [ 294.391144] Bluetooth: Invalid header checksum 10:53:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:36 executing program 5: syz_execute_func(&(0x7f0000000000)="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") futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) [ 294.500327] Bluetooth: Invalid header checksum [ 294.500503] Bluetooth: Invalid header checksum 10:53:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") getpid() select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9, 0x5, 0x3500000000000000, 0x9, 0x6, 0x4, 0xfffffffffffff6da, 0x3}, &(0x7f0000000140)={0x77359400}) 10:53:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[], 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 294.611718] Bluetooth: Invalid header checksum [ 294.616884] Bluetooth: Invalid header checksum 10:53:36 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5b95, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000000)="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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') [ 294.721124] Bluetooth: Invalid header checksum [ 294.721365] Bluetooth: Invalid header checksum 10:53:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[], 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:36 executing program 4: syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x163882) [ 294.832152] Bluetooth: Invalid header checksum [ 294.836798] Bluetooth: Invalid header checksum [ 294.942414] Bluetooth: Invalid header checksum [ 294.947090] Bluetooth: Invalid header checksum 10:53:36 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) 10:53:36 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5b95, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) [ 295.038686] audit: type=1800 audit(1556621616.925:54): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16693 res=0 [ 295.062955] Bluetooth: Invalid header checksum [ 295.072147] Bluetooth: Invalid header checksum [ 295.170404] Bluetooth: Invalid header checksum [ 295.180722] Bluetooth: Invalid header checksum [ 295.280311] Bluetooth: Invalid header checksum [ 295.290709] Bluetooth: Invalid header checksum [ 295.390296] Bluetooth: Invalid header checksum [ 295.401149] Bluetooth: Invalid header checksum [ 295.500381] Bluetooth: Invalid header checksum [ 295.510882] Bluetooth: Invalid header checksum [ 295.620377] Bluetooth: Invalid header checksum [ 295.624880] Bluetooth: Invalid header checksum [ 295.730317] Bluetooth: Invalid header checksum [ 295.730332] Bluetooth: Invalid header checksum [ 295.840326] Bluetooth: Invalid header checksum [ 295.841051] Bluetooth: Invalid header checksum [ 295.950383] Bluetooth: Invalid header checksum [ 295.960487] Bluetooth: Invalid header checksum [ 296.060393] Bluetooth: Invalid header checksum [ 296.070481] Bluetooth: Invalid header checksum [ 296.170313] Bluetooth: Invalid header checksum [ 296.180541] Bluetooth: Invalid header checksum [ 296.280394] Bluetooth: Invalid header checksum [ 296.300560] Bluetooth: Invalid header checksum [ 296.390291] Bluetooth: Invalid header checksum [ 296.410293] Bluetooth: Invalid header checksum [ 296.500365] Bluetooth: Invalid header checksum [ 296.520529] Bluetooth: Invalid header checksum [ 296.610326] Bluetooth: Invalid header checksum [ 296.630327] Bluetooth: Invalid header checksum [ 296.720353] Bluetooth: Invalid header checksum [ 296.740510] Bluetooth: Invalid header checksum [ 296.830304] Bluetooth: Invalid header checksum [ 296.850306] Bluetooth: Invalid header checksum [ 296.940355] Bluetooth: Invalid header checksum [ 296.960655] Bluetooth: Invalid header checksum [ 297.050310] Bluetooth: Invalid header checksum [ 297.070323] Bluetooth: Invalid header checksum [ 297.160374] Bluetooth: Invalid header checksum [ 297.190351] Bluetooth: Invalid header checksum [ 297.270384] Bluetooth: Invalid header checksum [ 297.302004] Bluetooth: Invalid header checksum [ 297.380518] Bluetooth: Invalid header checksum [ 297.410306] Bluetooth: Invalid header checksum 10:53:39 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x4004743d, &(0x7f0000000800)=""/246) ioctl$PPPIOCSPASS(r0, 0x4004743c, 0x0) 10:53:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[], 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:53:39 executing program 4: clone(0x400802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c21319a934dd520175e3b8f880100000000001000e0c99f3d653c00f0ff9da499df00"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x40000000000023d, 0x2000000022, &(0x7f00000001c0)={0x77359400}) syz_execute_func(&(0x7f0000000400)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0000004a0fc7a4ea70db00000000c4215debb6bdff0000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fdf30f7f8551de5901c0262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c49c8a03e3ec1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000660f79ca553131b83a00a2f1fbfb766208cf") 10:53:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24000010) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "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", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0xd9, "41b9403adc8e6cd3272e5910c7145069102fd8224656cb0796032722845eb488f294b6d941f26260744de27b63f7426b7e4bb06146d1d36fb1f3a729303e0e928ad29afb4a62c6b9a94a0a48c9e0aca8e57120155724267daa213943628b5642e05008242899c1e83096e6a356f7d8189a0916c69544fca6e9b11e43eb707eae8cef020b3fc6e648e98b6cf780ca73058965279898c827f4fcf610dc87337f30501d699ca71638e68a4969818841b7b2ee655ea6ef3010c67ebd3880c763db277cb1d96fcf80d1d64979cd931e8966adea4a93c029c2fb835c"}, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) socket$inet_udp(0x2, 0x2, 0x0) 10:53:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="82c700003c123d319bd070") syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000180c200000088ca89399dacef1d394d1b6c9ff146c9b570910e096131e34b1958cfe3553138ec3075b8c9eae9593f21c7add29931c4b6108db83dd81b0ce6ae99050f0599da9053726ff62e0ed6c96a6c3c29de5df3bdc48dfbb0daadf797b83a62ee81b00f54fd4a297f0900000000000b9be5ea4543475f"], 0x0) 10:53:39 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) [ 297.490408] Bluetooth: Invalid header checksum 10:53:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) syz_execute_func(&(0x7f00000001c0)="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") mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 10:53:39 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5b95, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000000)="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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') [ 297.523193] Bluetooth: Invalid header checksum 10:53:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc1PU\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e p4 [ 320.221225] Bluetooth: Invalid header checksum [ 320.223398] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:54:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c12") ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 320.263791] SS: sel=0x0000, attr=0x00085, limit=0x00000000, base=0x0000000000000000 [ 320.273272] loop5: p4 start 1854537728 is beyond EOD, truncated [ 320.280653] Bluetooth: Invalid header checksum [ 320.284326] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.319879] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.328404] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.328453] Bluetooth: Invalid header checksum [ 320.336736] GDTR: limit=0x00000000, base=0x0000000000000000 [ 320.349524] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 320.358198] IDTR: limit=0x00000000, base=0x0000000000000000 [ 320.367428] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:54:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x7a00, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 320.391034] Bluetooth: Invalid header checksum [ 320.414965] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 320.422661] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 320.430646] Interruptibility = 00000000 ActivityState = 00000000 [ 320.437139] *** Host State *** [ 320.438982] Bluetooth: Invalid header checksum [ 320.440949] RIP = 0xffffffff811749aa RSP = 0xffff88805c247998 [ 320.453425] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 320.460382] FSBase=00007f2507a07700 GSBase=ffff8880aef00000 TRBase=fffffe0000034000 [ 320.468463] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 320.478395] CR0=0000000080050033 CR3=000000008f581000 CR4=00000000001426e0 [ 320.485761] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86201910 [ 320.492760] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 320.501311] Bluetooth: Invalid header checksum [ 320.506293] *** Control State *** [ 320.510683] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ca [ 320.517795] EntryControls=0000d1ff ExitControls=002fefff [ 320.523640] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 320.535260] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 320.542759] Bluetooth: Invalid header checksum [ 320.547673] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 320.559427] reason=80000021 qualification=0000000000000000 10:54:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319b") ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 320.576937] IDTVectoring: info=00000000 errcode=00000000 [ 320.600576] TSC Offset = 0xffffff51831aefbc [ 320.605390] EPT pointer = 0x0000000092e2901e [ 320.620584] Bluetooth: Invalid header checksum 10:54:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 320.650371] Bluetooth: Invalid header checksum [ 320.703268] loop5: p1 < > p4 [ 320.731109] loop5: p4 start 1854537728 is beyond EOD, truncated [ 320.738293] Bluetooth: Invalid header checksum [ 320.765729] Bluetooth: Invalid header checksum 10:54:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x7a00, 0x0, &(0x7f0000000480)) 10:54:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) 10:54:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319b") ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:54:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="004548963e094b9bf04dab827d472fdb53082d57e9bebf830c90f6603be2eb1d069f4645e1e1c8461640a35b646e12ad54291b9846c36737dbd86118c9064b158cf2567e5acd29b5c1e249ca72ec5dea621d1384ec08"], 0x56) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl(r0, 0x1000008912, 0x0) [ 320.860981] Bluetooth: Invalid header checksum [ 320.871066] Bluetooth: Invalid header checksum 10:54:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x7a00, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 10:54:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 320.962390] Bluetooth: Invalid header checksum [ 320.981002] Bluetooth: Invalid header checksum 10:54:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319b") ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 321.076440] Bluetooth: Invalid header checksum [ 321.084386] *** Guest State *** [ 321.090969] Bluetooth: Invalid header checksum [ 321.099524] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 321.115343] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 321.124465] CR3 = 0x00000000fffbc000 [ 321.128453] RSP = 0x0000000000002006 RIP = 0x0000000000000040 [ 321.134755] RFLAGS=0x00010046 DR7 = 0x0000000000000400 [ 321.140966] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 321.147825] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.156305] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.164503] SS: sel=0x0000, attr=0x00085, limit=0x00000000, base=0x0000000000000000 [ 321.172810] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.180986] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.189101] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.192761] Bluetooth: Invalid header checksum [ 321.197666] GDTR: limit=0x00000000, base=0x0000000000000000 [ 321.210334] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.210790] Bluetooth: Invalid header checksum [ 321.218523] IDTR: limit=0x00000000, base=0x0000000000000000 [ 321.231382] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 321.239564] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 321.246325] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 321.254007] Interruptibility = 00000000 ActivityState = 00000000 [ 321.260551] *** Host State *** [ 321.263921] RIP = 0xffffffff811749aa RSP = 0xffff88805393f998 [ 321.270234] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 321.276828] FSBase=00007f2507a07700 GSBase=ffff8880aef00000 TRBase=fffffe0000034000 [ 321.284973] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 321.291058] CR0=0000000080050033 CR3=00000000836d1000 CR4=00000000001426e0 [ 321.298261] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86201910 [ 321.300457] Bluetooth: Invalid header checksum [ 321.305282] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 321.316154] *** Control State *** [ 321.316272] Bluetooth: Invalid header checksum [ 321.319777] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ca [ 321.331345] EntryControls=0000d1ff ExitControls=002fefff [ 321.336977] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 321.344237] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 321.351096] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 321.357848] reason=80000021 qualification=0000000000000000 [ 321.364504] IDTVectoring: info=00000000 errcode=00000000 [ 321.370152] TSC Offset = 0xffffff50faf15e50 [ 321.374657] EPT pointer = 0x00000000803cd01e 10:54:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x2000ec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002a000/0x18000)=nil, 0x0, 0xfffffffffffffe49, 0x0, 0x0, 0xfed1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x80000003f}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 321.400300] Bluetooth: Invalid header checksum [ 321.421832] Bluetooth: Invalid header checksum [ 321.515161] Bluetooth: Invalid header checksum [ 321.530623] Bluetooth: Invalid header checksum [ 321.620287] Bluetooth: Invalid header checksum [ 321.640355] Bluetooth: Invalid header checksum [ 321.730336] Bluetooth: Invalid header checksum [ 321.750489] Bluetooth: Invalid header checksum 10:54:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000040)=""/19, 0x1) [ 321.840457] Bluetooth: Invalid header checksum [ 321.862448] Bluetooth: Invalid header checksum [ 321.950372] Bluetooth: Invalid header checksum [ 321.970402] Bluetooth: Invalid header checksum [ 322.060387] Bluetooth: Invalid header checksum [ 322.080508] Bluetooth: Invalid header checksum [ 322.170305] Bluetooth: Invalid header checksum [ 322.190526] Bluetooth: Invalid header checksum [ 322.280391] Bluetooth: Invalid header checksum [ 322.300296] Bluetooth: Invalid header checksum [ 322.390693] Bluetooth: Invalid header checksum [ 322.410398] Bluetooth: Invalid header checksum [ 322.500446] Bluetooth: Invalid header checksum [ 322.520314] Bluetooth: Invalid header checksum [ 322.610375] Bluetooth: Invalid header checksum [ 322.630414] Bluetooth: Invalid header checksum [ 322.720356] Bluetooth: Invalid header checksum [ 322.740289] Bluetooth: Invalid header checksum [ 322.830287] Bluetooth: Invalid header checksum [ 322.850308] Bluetooth: Invalid header checksum [ 322.940365] Bluetooth: Invalid header checksum [ 322.960386] Bluetooth: Invalid header checksum [ 323.050336] Bluetooth: Invalid header checksum [ 323.080485] Bluetooth: Invalid header checksum [ 323.160371] Bluetooth: Invalid header checksum [ 323.190357] Bluetooth: Invalid header checksum [ 323.270432] Bluetooth: Invalid header checksum [ 323.300373] Bluetooth: Invalid header checksum [ 323.380292] Bluetooth: Invalid header checksum [ 323.410316] Bluetooth: Invalid header checksum [ 323.490537] Bluetooth: Invalid header checksum [ 323.520501] Bluetooth: Invalid header checksum [ 323.610410] Bluetooth: Invalid header checksum [ 323.640514] Bluetooth: Invalid header checksum [ 323.720345] Bluetooth: Invalid header checksum [ 323.750301] Bluetooth: Invalid header checksum [ 323.830323] Bluetooth: Invalid header checksum [ 323.860624] Bluetooth: Invalid header checksum [ 323.940391] Bluetooth: Invalid header checksum [ 323.970363] Bluetooth: Invalid header checksum [ 324.050312] Bluetooth: Invalid header checksum [ 324.080723] Bluetooth: Invalid header checksum [ 324.160384] Bluetooth: Invalid header checksum [ 324.190340] Bluetooth: Invalid header checksum [ 324.270409] Bluetooth: Invalid header checksum [ 324.300342] Bluetooth: Invalid header checksum [ 324.380430] Bluetooth: Invalid header checksum [ 324.410428] Bluetooth: Invalid header checksum [ 324.490388] Bluetooth: Invalid header checksum [ 324.521352] Bluetooth: Invalid header checksum [ 324.600421] Bluetooth: Invalid header checksum [ 324.640719] Bluetooth: Invalid header checksum [ 324.710385] Bluetooth: Invalid header checksum [ 324.750371] Bluetooth: Invalid header checksum [ 324.821237] Bluetooth: Invalid header checksum [ 324.860446] Bluetooth: Invalid header checksum [ 324.930374] Bluetooth: Invalid header checksum [ 324.970530] Bluetooth: Invalid header checksum [ 325.040378] Bluetooth: Invalid header checksum [ 325.080365] Bluetooth: Invalid header checksum [ 325.150442] Bluetooth: Invalid header checksum [ 325.190361] Bluetooth: Invalid header checksum [ 325.260390] Bluetooth: Invalid header checksum [ 325.300356] Bluetooth: Invalid header checksum [ 325.371077] Bluetooth: Invalid header checksum [ 325.410378] Bluetooth: Invalid header checksum [ 325.480401] Bluetooth: Invalid header checksum [ 325.530447] Bluetooth: Invalid header checksum [ 325.592693] Bluetooth: Invalid header checksum [ 325.640379] Bluetooth: Invalid header checksum [ 325.700415] Bluetooth: Invalid header checksum [ 325.750373] Bluetooth: Invalid header checksum [ 325.810585] Bluetooth: Invalid header checksum [ 325.860370] Bluetooth: Invalid header checksum [ 325.920407] Bluetooth: Invalid header checksum [ 325.970587] Bluetooth: Invalid header checksum [ 326.033024] Bluetooth: Invalid header checksum [ 326.080377] Bluetooth: Invalid header checksum [ 326.140406] Bluetooth: Invalid header checksum [ 326.190370] Bluetooth: Invalid header checksum [ 326.250558] Bluetooth: Invalid header checksum [ 326.300332] Bluetooth: Invalid header checksum [ 326.360375] Bluetooth: Invalid header checksum [ 326.410430] Bluetooth: Invalid header checksum [ 326.470396] Bluetooth: Invalid header checksum [ 326.520361] Bluetooth: Invalid header checksum [ 326.580384] Bluetooth: Invalid header checksum [ 326.630419] Bluetooth: Invalid header checksum [ 326.690368] Bluetooth: Invalid header checksum [ 326.740310] Bluetooth: Invalid header checksum [ 326.800407] Bluetooth: Invalid header checksum [ 326.850606] Bluetooth: Invalid header checksum [ 326.910617] Bluetooth: Invalid header checksum [ 326.974926] Bluetooth: Invalid header checksum [ 327.020583] Bluetooth: Invalid header checksum [ 327.080376] Bluetooth: Invalid header checksum [ 327.130393] Bluetooth: Invalid header checksum [ 327.190422] Bluetooth: Invalid header checksum [ 327.240484] Bluetooth: Invalid header checksum [ 327.300401] Bluetooth: Invalid header checksum [ 327.350440] Bluetooth: Invalid header checksum [ 327.411007] Bluetooth: Invalid header checksum [ 327.460386] Bluetooth: Invalid header checksum [ 327.520337] Bluetooth: Invalid header checksum [ 327.570424] Bluetooth: Invalid header checksum [ 327.630592] Bluetooth: Invalid header checksum [ 327.690371] Bluetooth: Invalid header checksum [ 327.740528] Bluetooth: Invalid header checksum [ 327.800393] Bluetooth: Invalid header checksum [ 327.850921] Bluetooth: Invalid header checksum [ 327.910607] Bluetooth: Invalid header checksum [ 327.960345] Bluetooth: Invalid header checksum [ 328.020443] Bluetooth: Invalid header checksum [ 328.070391] Bluetooth: Invalid header checksum [ 328.130463] Bluetooth: Invalid header checksum [ 328.180365] Bluetooth: Invalid header checksum [ 328.240814] Bluetooth: Invalid header checksum [ 328.290353] Bluetooth: Invalid header checksum [ 328.350374] Bluetooth: Invalid header checksum [ 328.400535] Bluetooth: Invalid header checksum [ 328.460354] Bluetooth: Invalid header checksum [ 328.510353] Bluetooth: Invalid header checksum [ 328.570388] Bluetooth: Invalid header checksum [ 328.620596] Bluetooth: Invalid header checksum [ 328.680376] Bluetooth: Invalid header checksum [ 328.730405] Bluetooth: Invalid header checksum [ 328.790540] Bluetooth: Invalid header checksum [ 328.840547] Bluetooth: Invalid header checksum [ 328.911088] Bluetooth: Invalid header checksum [ 328.950320] Bluetooth: Invalid header checksum [ 329.010524] Bluetooth: Invalid header checksum [ 329.060373] Bluetooth: Invalid header checksum [ 329.120899] Bluetooth: Invalid header checksum [ 329.170334] Bluetooth: Invalid header checksum [ 329.230306] Bluetooth: Invalid header checksum [ 329.280565] Bluetooth: Invalid header checksum [ 329.340545] Bluetooth: Invalid header checksum [ 329.390327] Bluetooth: Invalid header checksum [ 329.450291] Bluetooth: Invalid header checksum [ 329.500342] Bluetooth: Invalid header checksum [ 329.560785] Bluetooth: Invalid header checksum [ 329.610327] Bluetooth: Invalid header checksum [ 329.670449] Bluetooth: Invalid header checksum [ 329.720395] Bluetooth: Invalid header checksum [ 329.780340] Bluetooth: Invalid header checksum [ 329.830413] Bluetooth: Invalid header checksum [ 329.890328] Bluetooth: Invalid header checksum [ 329.940576] Bluetooth: Invalid header checksum [ 330.000550] Bluetooth: Invalid header checksum [ 330.050339] Bluetooth: Invalid header checksum [ 330.110342] Bluetooth: Invalid header checksum [ 330.160432] Bluetooth: Invalid header checksum [ 330.220402] Bluetooth: Invalid header checksum [ 330.270328] Bluetooth: Invalid header checksum [ 330.330376] Bluetooth: Invalid header checksum [ 330.380597] Bluetooth: Invalid header checksum [ 330.440580] Bluetooth: Invalid header checksum [ 330.490365] Bluetooth: Invalid header checksum [ 330.550423] Bluetooth: Invalid header checksum [ 330.600420] Bluetooth: Invalid header checksum [ 330.660365] Bluetooth: Invalid header checksum [ 330.713231] Bluetooth: Invalid header checksum [ 330.770377] Bluetooth: Invalid header checksum [ 330.820420] Bluetooth: Invalid header checksum [ 330.890500] Bluetooth: Invalid header checksum [ 330.930374] Bluetooth: Invalid header checksum [ 331.000769] Bluetooth: Invalid header checksum [ 331.040395] Bluetooth: Invalid header checksum [ 331.110410] Bluetooth: Invalid header checksum [ 331.150336] Bluetooth: Invalid header checksum [ 331.220386] Bluetooth: Invalid header checksum [ 331.260900] Bluetooth: Invalid header checksum [ 331.330349] Bluetooth: Invalid header checksum [ 331.370407] Bluetooth: Invalid header checksum [ 331.440421] Bluetooth: Invalid header checksum [ 331.480401] Bluetooth: Invalid header checksum [ 331.550331] Bluetooth: Invalid header checksum [ 331.590382] Bluetooth: Invalid header checksum [ 331.660444] Bluetooth: Invalid header checksum [ 331.700619] Bluetooth: Invalid header checksum [ 331.770394] Bluetooth: Invalid header checksum [ 331.810379] Bluetooth: Invalid header checksum [ 331.880402] Bluetooth: Invalid header checksum [ 331.920414] Bluetooth: Invalid header checksum [ 331.990417] Bluetooth: Invalid header checksum [ 332.030363] Bluetooth: Invalid header checksum [ 332.100410] Bluetooth: Invalid header checksum [ 332.140327] Bluetooth: Invalid header checksum [ 332.210330] Bluetooth: Invalid header checksum [ 332.250311] Bluetooth: Invalid header checksum [ 332.320774] Bluetooth: Invalid header checksum [ 332.360348] Bluetooth: Invalid header checksum [ 332.430386] Bluetooth: Invalid header checksum [ 332.470353] Bluetooth: Invalid header checksum [ 332.540453] Bluetooth: Invalid header checksum [ 332.580612] Bluetooth: Invalid header checksum [ 332.650415] Bluetooth: Invalid header checksum [ 332.690368] Bluetooth: Invalid header checksum [ 332.760459] Bluetooth: Invalid header checksum [ 332.800423] Bluetooth: Invalid header checksum [ 332.870412] Bluetooth: Invalid header checksum [ 332.910341] Bluetooth: Invalid header checksum [ 332.980777] Bluetooth: Invalid header checksum [ 333.020329] Bluetooth: Invalid header checksum [ 333.090389] Bluetooth: Invalid header checksum [ 333.130350] Bluetooth: Invalid header checksum [ 333.200433] Bluetooth: Invalid header checksum [ 333.240594] Bluetooth: Invalid header checksum [ 333.310396] Bluetooth: Invalid header checksum [ 333.350332] Bluetooth: Invalid header checksum [ 333.420451] Bluetooth: Invalid header checksum [ 333.460613] Bluetooth: Invalid header checksum [ 333.530401] Bluetooth: Invalid header checksum [ 333.570338] Bluetooth: Invalid header checksum [ 333.640461] Bluetooth: Invalid header checksum [ 333.680358] Bluetooth: Invalid header checksum [ 333.750478] Bluetooth: Invalid header checksum [ 333.790326] Bluetooth: Invalid header checksum [ 333.860459] Bluetooth: Invalid header checksum [ 333.900354] Bluetooth: Invalid header checksum [ 333.970389] Bluetooth: Invalid header checksum [ 334.010328] Bluetooth: Invalid header checksum [ 334.080340] Bluetooth: Invalid header checksum [ 334.120265] Bluetooth: Invalid header checksum [ 334.190372] Bluetooth: Invalid header checksum [ 334.230361] Bluetooth: Invalid header checksum [ 334.300435] Bluetooth: Invalid header checksum [ 334.340456] Bluetooth: Invalid header checksum [ 334.410371] Bluetooth: Invalid header checksum [ 334.460412] Bluetooth: Invalid header checksum [ 334.520291] Bluetooth: Invalid header checksum [ 334.570334] Bluetooth: Invalid header checksum [ 334.630390] Bluetooth: Invalid header checksum [ 334.680691] Bluetooth: Invalid header checksum [ 334.740271] Bluetooth: Invalid header checksum [ 334.790387] Bluetooth: Invalid header checksum [ 334.850409] Bluetooth: Invalid header checksum [ 334.900300] Bluetooth: Invalid header checksum [ 334.960409] Bluetooth: Invalid header checksum [ 335.010363] Bluetooth: Invalid header checksum [ 335.070364] Bluetooth: Invalid header checksum [ 335.120583] Bluetooth: Invalid header checksum [ 335.180632] Bluetooth: Invalid header checksum [ 335.230352] Bluetooth: Invalid header checksum [ 335.290375] Bluetooth: Invalid header checksum [ 335.340427] Bluetooth: Invalid header checksum [ 335.400338] Bluetooth: Invalid header checksum [ 335.450358] Bluetooth: Invalid header checksum [ 335.510331] Bluetooth: Invalid header checksum [ 335.560440] Bluetooth: Invalid header checksum [ 335.620256] Bluetooth: Invalid header checksum [ 335.670304] Bluetooth: Invalid header checksum [ 335.730386] Bluetooth: Invalid header checksum [ 335.780427] Bluetooth: Invalid header checksum [ 335.840552] Bluetooth: Invalid header checksum [ 335.900444] Bluetooth: Invalid header checksum [ 335.950417] Bluetooth: Invalid header checksum [ 336.010371] Bluetooth: Invalid header checksum [ 336.060615] Bluetooth: Invalid header checksum [ 336.120555] Bluetooth: Invalid header checksum [ 336.170349] Bluetooth: Invalid header checksum [ 336.230338] Bluetooth: Invalid header checksum [ 336.280551] Bluetooth: Invalid header checksum [ 336.340630] Bluetooth: Invalid header checksum [ 336.390371] Bluetooth: Invalid header checksum [ 336.450352] Bluetooth: Invalid header checksum [ 336.500365] Bluetooth: Invalid header checksum [ 336.560398] Bluetooth: Invalid header checksum [ 336.610461] Bluetooth: Invalid header checksum [ 336.670972] Bluetooth: Invalid header checksum [ 336.720329] Bluetooth: Invalid header checksum [ 336.780323] Bluetooth: Invalid header checksum [ 336.830379] Bluetooth: Invalid header checksum [ 336.890355] Bluetooth: Invalid header checksum [ 336.940333] Bluetooth: Invalid header checksum [ 337.000320] Bluetooth: Invalid header checksum [ 337.050415] Bluetooth: Invalid header checksum [ 337.111246] Bluetooth: Invalid header checksum [ 337.160316] Bluetooth: Invalid header checksum [ 337.220318] Bluetooth: Invalid header checksum [ 337.270268] Bluetooth: Invalid header checksum [ 337.330259] Bluetooth: Invalid header checksum [ 337.380340] Bluetooth: Invalid header checksum [ 337.440328] Bluetooth: Invalid header checksum [ 337.491020] Bluetooth: Invalid header checksum [ 337.550355] Bluetooth: Invalid header checksum [ 337.600375] Bluetooth: Invalid header checksum [ 337.660561] Bluetooth: Invalid header checksum [ 337.710363] Bluetooth: Invalid header checksum [ 337.770500] Bluetooth: Invalid header checksum [ 337.820316] Bluetooth: Invalid header checksum [ 337.880306] Bluetooth: Invalid header checksum [ 337.930618] Bluetooth: Invalid header checksum [ 337.990363] Bluetooth: Invalid header checksum [ 338.040475] Bluetooth: Invalid header checksum [ 338.100380] Bluetooth: Invalid header checksum [ 338.150405] Bluetooth: Invalid header checksum [ 338.210466] Bluetooth: Invalid header checksum [ 338.260471] Bluetooth: Invalid header checksum [ 338.320451] Bluetooth: Invalid header checksum [ 338.370468] Bluetooth: Invalid header checksum [ 338.430421] Bluetooth: Invalid header checksum [ 338.480382] Bluetooth: Invalid header checksum [ 338.540571] Bluetooth: Invalid header checksum [ 338.590662] Bluetooth: Invalid header checksum [ 338.650348] Bluetooth: Invalid header checksum [ 338.700420] Bluetooth: Invalid header checksum [ 338.760381] Bluetooth: Invalid header checksum [ 338.810530] Bluetooth: Invalid header checksum [ 338.870296] Bluetooth: Invalid header checksum [ 338.920453] Bluetooth: Invalid header checksum [ 338.980425] Bluetooth: Invalid header checksum [ 339.030502] Bluetooth: Invalid header checksum [ 339.090688] Bluetooth: Invalid header checksum [ 339.140606] Bluetooth: Invalid header checksum [ 339.200418] Bluetooth: Invalid header checksum [ 339.250692] Bluetooth: Invalid header checksum [ 339.310665] Bluetooth: Invalid header checksum [ 339.360363] Bluetooth: Invalid header checksum [ 339.420444] Bluetooth: Invalid header checksum [ 339.471055] Bluetooth: Invalid header checksum [ 339.530432] Bluetooth: Invalid header checksum [ 339.580367] Bluetooth: Invalid header checksum [ 339.640344] Bluetooth: Invalid header checksum [ 339.690452] Bluetooth: Invalid header checksum [ 339.750545] Bluetooth: Invalid header checksum [ 339.800471] Bluetooth: Invalid header checksum [ 339.860400] Bluetooth: Invalid header checksum [ 339.910374] Bluetooth: Invalid header checksum [ 339.970330] Bluetooth: Invalid header checksum [ 340.020466] Bluetooth: Invalid header checksum [ 340.080326] Bluetooth: Invalid header checksum [ 340.130757] Bluetooth: Invalid header checksum [ 340.190623] Bluetooth: Invalid header checksum [ 340.240395] Bluetooth: Invalid header checksum [ 340.300419] Bluetooth: Invalid header checksum [ 340.350304] Bluetooth: Invalid header checksum [ 340.410481] Bluetooth: Invalid header checksum [ 340.460355] Bluetooth: Invalid header checksum [ 340.520413] Bluetooth: Invalid header checksum [ 340.570472] Bluetooth: Invalid header checksum [ 340.630606] Bluetooth: Invalid header checksum [ 340.680515] Bluetooth: Invalid header checksum [ 340.740401] Bluetooth: Invalid header checksum [ 340.790860] Bluetooth: Invalid header checksum [ 340.850432] Bluetooth: Invalid header checksum [ 340.900377] Bluetooth: Invalid header checksum [ 340.960343] Bluetooth: Invalid header checksum [ 341.010381] Bluetooth: Invalid header checksum [ 341.070368] Bluetooth: Invalid header checksum [ 341.120302] Bluetooth: Invalid header checksum [ 341.180406] Bluetooth: Invalid header checksum [ 341.230308] Bluetooth: Invalid header checksum [ 341.290330] Bluetooth: Invalid header checksum [ 341.341065] Bluetooth: Invalid header checksum [ 341.400389] Bluetooth: Invalid header checksum [ 341.450469] Bluetooth: Invalid header checksum [ 341.510488] Bluetooth: Invalid header checksum [ 341.560567] Bluetooth: Invalid header checksum [ 341.620564] Bluetooth: Invalid header checksum [ 341.670467] Bluetooth: Invalid header checksum [ 341.730347] Bluetooth: Invalid header checksum [ 341.780518] Bluetooth: Invalid header checksum [ 341.840297] Bluetooth: Invalid header checksum [ 341.890390] Bluetooth: Invalid header checksum [ 341.950351] Bluetooth: Invalid header checksum [ 342.000387] Bluetooth: Invalid header checksum [ 342.060343] Bluetooth: Invalid header checksum [ 342.110359] Bluetooth: Invalid header checksum [ 342.170420] Bluetooth: Invalid header checksum [ 342.220384] Bluetooth: Invalid header checksum [ 342.280371] Bluetooth: Invalid header checksum [ 342.330552] Bluetooth: Invalid header checksum [ 342.390464] Bluetooth: Invalid header checksum [ 342.440461] Bluetooth: Invalid header checksum [ 342.500472] Bluetooth: Invalid header checksum [ 342.550740] Bluetooth: Invalid header checksum [ 342.610458] Bluetooth: Invalid header checksum [ 342.660453] Bluetooth: Invalid header checksum [ 342.720449] Bluetooth: Invalid header checksum [ 342.770845] Bluetooth: Invalid header checksum [ 342.830788] Bluetooth: Invalid header checksum [ 342.880462] Bluetooth: Invalid header checksum [ 342.940465] Bluetooth: Invalid header checksum [ 342.990553] Bluetooth: Invalid header checksum [ 343.050395] Bluetooth: Invalid header checksum [ 343.100508] Bluetooth: Invalid header checksum [ 343.160455] Bluetooth: Invalid header checksum [ 343.210584] Bluetooth: Invalid header checksum [ 343.270390] Bluetooth: Invalid header checksum [ 343.320540] Bluetooth: Invalid header checksum [ 343.380431] Bluetooth: Invalid header checksum [ 343.430659] Bluetooth: Invalid header checksum [ 343.490683] Bluetooth: Invalid header checksum [ 343.540473] Bluetooth: Invalid header checksum [ 343.600400] Bluetooth: Invalid header checksum [ 343.650361] Bluetooth: Invalid header checksum [ 343.710454] Bluetooth: Invalid header checksum [ 343.760466] Bluetooth: Invalid header checksum [ 343.820428] Bluetooth: Invalid header checksum [ 343.870579] Bluetooth: Invalid header checksum [ 343.930381] Bluetooth: Invalid header checksum [ 343.980446] Bluetooth: Invalid header checksum [ 344.040467] Bluetooth: Invalid header checksum [ 344.090520] Bluetooth: Invalid header checksum [ 344.150485] Bluetooth: Invalid header checksum [ 344.200560] Bluetooth: Invalid header checksum [ 344.260453] Bluetooth: Invalid header checksum [ 344.311139] Bluetooth: Invalid header checksum [ 344.370483] Bluetooth: Invalid header checksum [ 344.420482] Bluetooth: Invalid header checksum [ 344.480465] Bluetooth: Invalid header checksum [ 344.530409] Bluetooth: Invalid header checksum [ 344.590395] Bluetooth: Invalid header checksum [ 344.640431] Bluetooth: Invalid header checksum [ 344.700433] Bluetooth: Invalid header checksum [ 344.750492] Bluetooth: Invalid header checksum [ 344.810392] Bluetooth: Invalid header checksum [ 344.860496] Bluetooth: Invalid header checksum [ 344.920409] Bluetooth: Invalid header checksum [ 344.970419] Bluetooth: Invalid header checksum [ 345.030853] Bluetooth: Invalid header checksum [ 345.080444] Bluetooth: Invalid header checksum [ 345.140441] Bluetooth: Invalid header checksum [ 345.190809] Bluetooth: Invalid header checksum [ 345.250444] Bluetooth: Invalid header checksum [ 345.300430] Bluetooth: Invalid header checksum [ 345.360387] Bluetooth: Invalid header checksum [ 345.410924] Bluetooth: Invalid header checksum [ 345.470380] Bluetooth: Invalid header checksum [ 345.520508] Bluetooth: Invalid header checksum [ 345.580426] Bluetooth: Invalid header checksum [ 345.630398] Bluetooth: Invalid header checksum [ 345.690470] Bluetooth: Invalid header checksum [ 345.740567] Bluetooth: Invalid header checksum [ 345.800642] Bluetooth: Invalid header checksum [ 345.850431] Bluetooth: Invalid header checksum [ 345.910438] Bluetooth: Invalid header checksum [ 345.960742] Bluetooth: Invalid header checksum [ 346.020716] Bluetooth: Invalid header checksum [ 346.070750] Bluetooth: Invalid header checksum [ 346.140383] Bluetooth: Invalid header checksum [ 346.180488] Bluetooth: Invalid header checksum [ 346.250342] Bluetooth: Invalid header checksum [ 346.290363] Bluetooth: Invalid header checksum [ 346.360457] Bluetooth: Invalid header checksum [ 346.400378] Bluetooth: Invalid header checksum [ 346.470508] Bluetooth: Invalid header checksum [ 346.510383] Bluetooth: Invalid header checksum [ 346.580469] Bluetooth: Invalid header checksum [ 346.620493] Bluetooth: Invalid header checksum [ 346.690447] Bluetooth: Invalid header checksum [ 346.730497] Bluetooth: Invalid header checksum [ 346.800435] Bluetooth: Invalid header checksum [ 346.840564] Bluetooth: Invalid header checksum [ 346.910422] Bluetooth: Invalid header checksum [ 346.950422] Bluetooth: Invalid header checksum [ 347.020531] Bluetooth: Invalid header checksum [ 347.060408] Bluetooth: Invalid header checksum [ 347.130333] Bluetooth: Invalid header checksum [ 347.170358] Bluetooth: Invalid header checksum [ 347.240395] Bluetooth: Invalid header checksum [ 347.280414] Bluetooth: Invalid header checksum [ 347.350341] Bluetooth: Invalid header checksum [ 347.390551] Bluetooth: Invalid header checksum [ 347.460380] Bluetooth: Invalid header checksum [ 347.500361] Bluetooth: Invalid header checksum [ 347.570417] Bluetooth: Invalid header checksum [ 347.610467] Bluetooth: Invalid header checksum [ 347.682423] Bluetooth: Invalid header checksum [ 347.720433] Bluetooth: Invalid header checksum [ 347.790443] Bluetooth: Invalid header checksum [ 347.830347] Bluetooth: Invalid header checksum [ 347.900373] Bluetooth: Invalid header checksum [ 347.940354] Bluetooth: Invalid header checksum [ 348.010322] Bluetooth: Invalid header checksum [ 348.050380] Bluetooth: Invalid header checksum [ 348.120577] Bluetooth: Invalid header checksum [ 348.160296] Bluetooth: Invalid header checksum [ 348.230397] Bluetooth: Invalid header checksum [ 348.270523] Bluetooth: Invalid header checksum [ 348.340451] Bluetooth: Invalid header checksum [ 348.380704] Bluetooth: Invalid header checksum [ 348.450349] Bluetooth: Invalid header checksum [ 348.490666] Bluetooth: Invalid header checksum [ 348.560398] Bluetooth: Invalid header checksum [ 348.600687] Bluetooth: Invalid header checksum [ 348.670368] Bluetooth: Invalid header checksum [ 348.710917] Bluetooth: Invalid header checksum [ 348.780278] Bluetooth: Invalid header checksum [ 348.820466] Bluetooth: Invalid header checksum [ 348.890474] Bluetooth: Invalid header checksum [ 348.930567] Bluetooth: Invalid header checksum [ 349.000293] Bluetooth: Invalid header checksum [ 349.040404] Bluetooth: Invalid header checksum [ 349.110718] Bluetooth: Invalid header checksum [ 349.150327] Bluetooth: Invalid header checksum [ 349.220476] Bluetooth: Invalid header checksum [ 349.260401] Bluetooth: Invalid header checksum [ 349.330412] Bluetooth: Invalid header checksum [ 349.370670] Bluetooth: Invalid header checksum [ 349.440320] Bluetooth: Invalid header checksum [ 349.480391] Bluetooth: Invalid header checksum [ 349.550390] Bluetooth: Invalid header checksum [ 349.590657] Bluetooth: Invalid header checksum [ 349.660524] Bluetooth: Invalid header checksum [ 349.700337] Bluetooth: Invalid header checksum [ 349.770332] Bluetooth: Invalid header checksum [ 349.810505] Bluetooth: Invalid header checksum [ 349.880326] Bluetooth: Invalid header checksum [ 349.920519] Bluetooth: Invalid header checksum [ 349.990428] Bluetooth: Invalid header checksum [ 350.030529] Bluetooth: Invalid header checksum [ 350.100332] Bluetooth: Invalid header checksum [ 350.140538] Bluetooth: Invalid header checksum [ 350.210432] Bluetooth: Invalid header checksum [ 350.250729] Bluetooth: Invalid header checksum [ 350.320451] Bluetooth: Invalid header checksum [ 350.360535] Bluetooth: Invalid header checksum [ 350.430492] Bluetooth: Invalid header checksum [ 350.470667] Bluetooth: Invalid header checksum [ 350.540630] Bluetooth: Invalid header checksum [ 350.580383] Bluetooth: Invalid header checksum [ 350.650291] Bluetooth: Invalid header checksum [ 350.690601] Bluetooth: Invalid header checksum [ 350.760387] Bluetooth: Invalid header checksum [ 350.800868] Bluetooth: Invalid header checksum [ 350.870353] Bluetooth: Invalid header checksum [ 350.910418] Bluetooth: Invalid header checksum [ 350.980411] Bluetooth: Invalid header checksum [ 351.020358] Bluetooth: Invalid header checksum [ 351.090428] Bluetooth: Invalid header checksum [ 351.130610] Bluetooth: Invalid header checksum [ 351.200418] Bluetooth: Invalid header checksum [ 351.240436] Bluetooth: Invalid header checksum [ 351.310535] Bluetooth: Invalid header checksum [ 351.350601] Bluetooth: Invalid header checksum [ 351.420366] Bluetooth: Invalid header checksum [ 351.460351] Bluetooth: Invalid header checksum [ 351.530380] Bluetooth: Invalid header checksum [ 351.570381] Bluetooth: Invalid header checksum [ 351.640411] Bluetooth: Invalid header checksum [ 351.680424] Bluetooth: Invalid header checksum [ 351.750590] Bluetooth: Invalid header checksum [ 351.790543] Bluetooth: Invalid header checksum [ 351.860407] Bluetooth: Invalid header checksum [ 351.900501] Bluetooth: Invalid header checksum [ 351.970520] Bluetooth: Invalid header checksum [ 352.010483] Bluetooth: Invalid header checksum [ 352.080369] Bluetooth: Invalid header checksum [ 352.120678] Bluetooth: Invalid header checksum [ 352.190352] Bluetooth: Invalid header checksum [ 352.230513] Bluetooth: Invalid header checksum [ 352.300430] Bluetooth: Invalid header checksum [ 352.340454] Bluetooth: Invalid header checksum [ 352.410571] Bluetooth: Invalid header checksum [ 352.450501] Bluetooth: Invalid header checksum [ 352.520351] Bluetooth: Invalid header checksum [ 352.560460] Bluetooth: Invalid header checksum [ 352.630386] Bluetooth: Invalid header checksum [ 352.670658] Bluetooth: Invalid header checksum [ 352.740411] Bluetooth: Invalid header checksum [ 352.780486] Bluetooth: Invalid header checksum [ 352.850350] Bluetooth: Invalid header checksum [ 352.890496] Bluetooth: Invalid header checksum [ 352.970331] Bluetooth: Invalid header checksum [ 353.000426] Bluetooth: Invalid header checksum [ 353.080408] Bluetooth: Invalid header checksum [ 353.110559] Bluetooth: Invalid header checksum [ 353.190627] Bluetooth: Invalid header checksum [ 353.220438] Bluetooth: Invalid header checksum [ 353.300416] Bluetooth: Invalid header checksum [ 353.330438] Bluetooth: Invalid header checksum [ 353.410347] Bluetooth: Invalid header checksum [ 353.441113] Bluetooth: Invalid header checksum [ 353.520423] Bluetooth: Invalid header checksum [ 353.550508] Bluetooth: Invalid header checksum [ 353.630320] Bluetooth: Invalid header checksum [ 353.660435] Bluetooth: Invalid header checksum [ 353.740340] Bluetooth: Invalid header checksum [ 353.770424] Bluetooth: Invalid header checksum [ 353.850330] Bluetooth: Invalid header checksum [ 353.880378] Bluetooth: Invalid header checksum [ 353.960487] Bluetooth: Invalid header checksum [ 353.990629] Bluetooth: Invalid header checksum [ 354.070529] Bluetooth: Invalid header checksum [ 354.100468] Bluetooth: Invalid header checksum [ 354.180427] Bluetooth: Invalid header checksum [ 354.210516] Bluetooth: Invalid header checksum [ 354.290340] Bluetooth: Invalid header checksum [ 354.320436] Bluetooth: Invalid header checksum [ 354.400401] Bluetooth: Invalid header checksum [ 354.430679] Bluetooth: Invalid header checksum [ 354.510333] Bluetooth: Invalid header checksum [ 354.540467] Bluetooth: Invalid header checksum [ 354.620403] Bluetooth: Invalid header checksum [ 354.650288] Bluetooth: Invalid header checksum [ 354.730376] Bluetooth: Invalid header checksum [ 354.760573] Bluetooth: Invalid header checksum [ 354.840346] Bluetooth: Invalid header checksum [ 354.870504] Bluetooth: Invalid header checksum [ 354.950387] Bluetooth: Invalid header checksum [ 354.980356] Bluetooth: Invalid header checksum [ 355.060344] Bluetooth: Invalid header checksum [ 355.090579] Bluetooth: Invalid header checksum [ 355.170538] Bluetooth: Invalid header checksum [ 355.200453] Bluetooth: Invalid header checksum [ 355.280409] Bluetooth: Invalid header checksum [ 355.310336] Bluetooth: Invalid header checksum [ 355.390525] Bluetooth: Invalid header checksum [ 355.420652] Bluetooth: Invalid header checksum [ 355.500349] Bluetooth: Invalid header checksum [ 355.530331] Bluetooth: Invalid header checksum [ 355.610526] Bluetooth: Invalid header checksum [ 355.640401] Bluetooth: Invalid header checksum [ 355.720406] Bluetooth: Invalid header checksum [ 355.750508] Bluetooth: Invalid header checksum [ 355.831120] Bluetooth: Invalid header checksum [ 355.860364] Bluetooth: Invalid header checksum [ 355.940342] Bluetooth: Invalid header checksum [ 355.970553] Bluetooth: Invalid header checksum [ 356.050478] Bluetooth: Invalid header checksum [ 356.080359] Bluetooth: Invalid header checksum [ 356.160344] Bluetooth: Invalid header checksum [ 356.190636] Bluetooth: Invalid header checksum [ 356.270556] Bluetooth: Invalid header checksum [ 356.300468] Bluetooth: Invalid header checksum [ 356.380429] Bluetooth: Invalid header checksum [ 356.410664] Bluetooth: Invalid header checksum [ 356.490517] Bluetooth: Invalid header checksum [ 356.520441] Bluetooth: Invalid header checksum [ 356.600417] Bluetooth: Invalid header checksum [ 356.631024] Bluetooth: Invalid header checksum [ 356.710323] Bluetooth: Invalid header checksum [ 356.740358] Bluetooth: Invalid header checksum [ 356.820371] Bluetooth: Invalid header checksum [ 356.850459] Bluetooth: Invalid header checksum [ 356.930323] Bluetooth: Invalid header checksum [ 356.960337] Bluetooth: Invalid header checksum [ 357.040347] Bluetooth: Invalid header checksum [ 357.070720] Bluetooth: Invalid header checksum [ 357.150538] Bluetooth: Invalid header checksum [ 357.180467] Bluetooth: Invalid header checksum [ 357.260423] Bluetooth: Invalid header checksum [ 357.290904] Bluetooth: Invalid header checksum [ 357.370341] Bluetooth: Invalid header checksum [ 357.400417] Bluetooth: Invalid header checksum [ 357.480383] Bluetooth: Invalid header checksum [ 357.510468] Bluetooth: Invalid header checksum [ 357.590360] Bluetooth: Invalid header checksum [ 357.620446] Bluetooth: Invalid header checksum [ 357.700382] Bluetooth: Invalid header checksum [ 357.730435] Bluetooth: Invalid header checksum [ 357.813105] Bluetooth: Invalid header checksum [ 357.840369] Bluetooth: Invalid header checksum [ 357.920392] Bluetooth: Invalid header checksum [ 357.950529] Bluetooth: Invalid header checksum [ 358.030552] Bluetooth: Invalid header checksum [ 358.060480] Bluetooth: Invalid header checksum [ 358.140412] Bluetooth: Invalid header checksum [ 358.170688] Bluetooth: Invalid header checksum [ 358.250529] Bluetooth: Invalid header checksum [ 358.280452] Bluetooth: Invalid header checksum [ 358.360420] Bluetooth: Invalid header checksum [ 358.390347] Bluetooth: Invalid header checksum [ 358.470418] Bluetooth: Invalid header checksum [ 358.500336] Bluetooth: Invalid header checksum [ 358.580343] Bluetooth: Invalid header checksum [ 358.610411] Bluetooth: Invalid header checksum [ 358.690463] Bluetooth: Invalid header checksum [ 358.720482] Bluetooth: Invalid header checksum [ 358.800412] Bluetooth: Invalid header checksum [ 358.830548] Bluetooth: Invalid header checksum [ 358.910492] Bluetooth: Invalid header checksum [ 358.940396] Bluetooth: Invalid header checksum [ 359.020408] Bluetooth: Invalid header checksum [ 359.050529] Bluetooth: Invalid header checksum [ 359.130557] Bluetooth: Invalid header checksum [ 359.160463] Bluetooth: Invalid header checksum [ 359.240342] Bluetooth: Invalid header checksum [ 359.270374] Bluetooth: Invalid header checksum [ 359.350442] Bluetooth: Invalid header checksum [ 359.380292] Bluetooth: Invalid header checksum [ 359.470273] Bluetooth: Invalid header checksum [ 359.490392] Bluetooth: Invalid header checksum [ 359.580359] Bluetooth: Invalid header checksum [ 359.600364] Bluetooth: Invalid header checksum [ 359.690681] Bluetooth: Invalid header checksum [ 359.710463] Bluetooth: Invalid header checksum [ 359.800417] Bluetooth: Invalid header checksum [ 359.820429] Bluetooth: Invalid header checksum [ 359.910471] Bluetooth: Invalid header checksum [ 359.930518] Bluetooth: Invalid header checksum [ 360.020412] Bluetooth: Invalid header checksum [ 360.040333] Bluetooth: Invalid header checksum [ 360.130288] Bluetooth: Invalid header checksum [ 360.150443] Bluetooth: Invalid header checksum [ 360.240337] Bluetooth: Invalid header checksum [ 360.260303] Bluetooth: Invalid header checksum [ 360.350427] Bluetooth: Invalid header checksum [ 360.370336] Bluetooth: Invalid header checksum [ 360.460453] Bluetooth: Invalid header checksum [ 360.480497] Bluetooth: Invalid header checksum [ 360.570457] Bluetooth: Invalid header checksum [ 360.590332] Bluetooth: Invalid header checksum [ 360.680371] Bluetooth: Invalid header checksum [ 360.700416] Bluetooth: Invalid header checksum [ 360.790502] Bluetooth: Invalid header checksum [ 360.810471] Bluetooth: Invalid header checksum [ 360.900350] Bluetooth: Invalid header checksum [ 360.920282] Bluetooth: Invalid header checksum [ 361.010403] Bluetooth: Invalid header checksum [ 361.030722] Bluetooth: Invalid header checksum [ 361.120388] Bluetooth: Invalid header checksum [ 361.140984] Bluetooth: Invalid header checksum [ 361.230346] Bluetooth: Invalid header checksum [ 361.250473] Bluetooth: Invalid header checksum [ 361.340549] Bluetooth: Invalid header checksum [ 361.360477] Bluetooth: Invalid header checksum [ 361.450375] Bluetooth: Invalid header checksum [ 361.470493] Bluetooth: Invalid header checksum [ 361.560509] Bluetooth: Invalid header checksum [ 361.580456] Bluetooth: Invalid header checksum [ 361.670349] Bluetooth: Invalid header checksum [ 361.690369] Bluetooth: Invalid header checksum [ 361.780411] Bluetooth: Invalid header checksum [ 361.800443] Bluetooth: Invalid header checksum [ 361.890442] Bluetooth: Invalid header checksum [ 361.910494] Bluetooth: Invalid header checksum [ 362.000646] Bluetooth: Invalid header checksum [ 362.020498] Bluetooth: Invalid header checksum [ 362.110440] Bluetooth: Invalid header checksum [ 362.130466] Bluetooth: Invalid header checksum [ 362.220475] Bluetooth: Invalid header checksum [ 362.240449] Bluetooth: Invalid header checksum [ 362.330458] Bluetooth: Invalid header checksum [ 362.350429] Bluetooth: Invalid header checksum [ 362.440498] Bluetooth: Invalid header checksum [ 362.460455] Bluetooth: Invalid header checksum [ 362.550466] Bluetooth: Invalid header checksum [ 362.570469] Bluetooth: Invalid header checksum [ 362.660528] Bluetooth: Invalid header checksum [ 362.680541] Bluetooth: Invalid header checksum [ 362.770345] Bluetooth: Invalid header checksum [ 362.790387] Bluetooth: Invalid header checksum [ 362.880397] Bluetooth: Invalid header checksum [ 362.900343] Bluetooth: Invalid header checksum [ 362.990321] Bluetooth: Invalid header checksum [ 363.010294] Bluetooth: Invalid header checksum [ 363.100536] Bluetooth: Invalid header checksum [ 363.120476] Bluetooth: Invalid header checksum [ 363.210442] Bluetooth: Invalid header checksum [ 363.230668] Bluetooth: Invalid header checksum [ 363.320428] Bluetooth: Invalid header checksum [ 363.340401] Bluetooth: Invalid header checksum [ 363.430509] Bluetooth: Invalid header checksum [ 363.460455] Bluetooth: Invalid header checksum [ 363.540342] Bluetooth: Invalid header checksum [ 363.570405] Bluetooth: Invalid header checksum [ 363.650314] Bluetooth: Invalid header checksum [ 363.680714] Bluetooth: Invalid header checksum [ 363.760467] Bluetooth: Invalid header checksum [ 363.790431] Bluetooth: Invalid header checksum [ 363.870336] Bluetooth: Invalid header checksum [ 363.900392] Bluetooth: Invalid header checksum [ 363.980336] Bluetooth: Invalid header checksum [ 364.010310] Bluetooth: Invalid header checksum [ 364.090331] Bluetooth: Invalid header checksum [ 364.120359] Bluetooth: Invalid header checksum [ 364.200423] Bluetooth: Invalid header checksum [ 364.230343] Bluetooth: Invalid header checksum [ 364.310387] Bluetooth: Invalid header checksum [ 364.340656] Bluetooth: Invalid header checksum [ 364.420669] Bluetooth: Invalid header checksum [ 364.450399] Bluetooth: Invalid header checksum [ 364.530417] Bluetooth: Invalid header checksum [ 364.560416] Bluetooth: Invalid header checksum [ 364.640964] Bluetooth: Invalid header checksum [ 364.670319] Bluetooth: Invalid header checksum [ 364.750397] Bluetooth: Invalid header checksum [ 364.780541] Bluetooth: Invalid header checksum [ 364.860344] Bluetooth: Invalid header checksum [ 364.890572] Bluetooth: Invalid header checksum [ 364.970417] Bluetooth: Invalid header checksum [ 365.000364] Bluetooth: Invalid header checksum [ 365.080338] Bluetooth: Invalid header checksum [ 365.110431] Bluetooth: Invalid header checksum [ 365.200522] Bluetooth: Invalid header checksum [ 365.220568] Bluetooth: Invalid header checksum [ 365.310368] Bluetooth: Invalid header checksum [ 365.330351] Bluetooth: Invalid header checksum [ 365.420391] Bluetooth: Invalid header checksum [ 365.440326] Bluetooth: Invalid header checksum [ 365.530419] Bluetooth: Invalid header checksum [ 365.550443] Bluetooth: Invalid header checksum [ 365.640558] Bluetooth: Invalid header checksum [ 365.660467] Bluetooth: Invalid header checksum [ 365.750408] Bluetooth: Invalid header checksum [ 365.770462] Bluetooth: Invalid header checksum [ 365.860501] Bluetooth: Invalid header checksum [ 365.880390] Bluetooth: Invalid header checksum [ 365.970379] Bluetooth: Invalid header checksum [ 365.990460] Bluetooth: Invalid header checksum [ 366.090489] Bluetooth: Invalid header checksum [ 366.100405] Bluetooth: Invalid header checksum [ 366.200457] Bluetooth: Invalid header checksum [ 366.210402] Bluetooth: Invalid header checksum [ 366.310332] Bluetooth: Invalid header checksum [ 366.330390] Bluetooth: Invalid header checksum [ 366.420401] Bluetooth: Invalid header checksum [ 366.450351] Bluetooth: Invalid header checksum [ 366.530383] Bluetooth: Invalid header checksum [ 366.560596] Bluetooth: Invalid header checksum [ 366.640285] Bluetooth: Invalid header checksum [ 366.670309] Bluetooth: Invalid header checksum [ 366.750363] Bluetooth: Invalid header checksum [ 366.780600] Bluetooth: Invalid header checksum [ 366.860338] Bluetooth: Invalid header checksum [ 366.890433] Bluetooth: Invalid header checksum [ 366.970371] Bluetooth: Invalid header checksum [ 367.000529] Bluetooth: Invalid header checksum [ 367.080514] Bluetooth: Invalid header checksum [ 367.111114] Bluetooth: Invalid header checksum [ 367.190387] Bluetooth: Invalid header checksum [ 367.220450] Bluetooth: Invalid header checksum [ 367.300438] Bluetooth: Invalid header checksum [ 367.330511] Bluetooth: Invalid header checksum [ 367.410542] Bluetooth: Invalid header checksum [ 367.440407] Bluetooth: Invalid header checksum [ 367.520430] Bluetooth: Invalid header checksum [ 367.550935] Bluetooth: Invalid header checksum [ 367.630505] Bluetooth: Invalid header checksum [ 367.660438] Bluetooth: Invalid header checksum [ 367.740482] Bluetooth: Invalid header checksum [ 367.770719] Bluetooth: Invalid header checksum [ 367.850533] Bluetooth: Invalid header checksum [ 367.880453] Bluetooth: Invalid header checksum [ 367.960439] Bluetooth: Invalid header checksum [ 367.990519] Bluetooth: Invalid header checksum [ 368.070415] Bluetooth: Invalid header checksum [ 368.100803] Bluetooth: Invalid header checksum [ 368.180463] Bluetooth: Invalid header checksum [ 368.210569] Bluetooth: Invalid header checksum [ 368.290517] Bluetooth: Invalid header checksum [ 368.320424] Bluetooth: Invalid header checksum [ 368.400438] Bluetooth: Invalid header checksum [ 368.430580] Bluetooth: Invalid header checksum [ 368.510654] Bluetooth: Invalid header checksum [ 368.540444] Bluetooth: Invalid header checksum [ 368.620427] Bluetooth: Invalid header checksum [ 368.651046] Bluetooth: Invalid header checksum [ 368.730359] Bluetooth: Invalid header checksum [ 368.760455] Bluetooth: Invalid header checksum [ 368.840434] Bluetooth: Invalid header checksum [ 368.870730] Bluetooth: Invalid header checksum [ 368.950531] Bluetooth: Invalid header checksum [ 368.980438] Bluetooth: Invalid header checksum [ 369.060468] Bluetooth: Invalid header checksum [ 369.090481] Bluetooth: Invalid header checksum [ 369.170572] Bluetooth: Invalid header checksum [ 369.200625] Bluetooth: Invalid header checksum [ 369.280464] Bluetooth: Invalid header checksum [ 369.310564] Bluetooth: Invalid header checksum [ 369.390464] Bluetooth: Invalid header checksum [ 369.420487] Bluetooth: Invalid header checksum [ 369.500500] Bluetooth: Invalid header checksum [ 369.530728] Bluetooth: Invalid header checksum [ 369.610985] Bluetooth: Invalid header checksum [ 369.640462] Bluetooth: Invalid header checksum [ 369.720423] Bluetooth: Invalid header checksum [ 369.750854] Bluetooth: Invalid header checksum [ 369.830691] Bluetooth: Invalid header checksum [ 369.860455] Bluetooth: Invalid header checksum [ 369.940443] Bluetooth: Invalid header checksum [ 369.970747] Bluetooth: Invalid header checksum [ 370.050525] Bluetooth: Invalid header checksum [ 370.080435] Bluetooth: Invalid header checksum [ 370.160428] Bluetooth: Invalid header checksum [ 370.190463] Bluetooth: Invalid header checksum [ 370.270494] Bluetooth: Invalid header checksum [ 370.300510] Bluetooth: Invalid header checksum [ 370.380454] Bluetooth: Invalid header checksum [ 370.410728] Bluetooth: Invalid header checksum [ 370.490491] Bluetooth: Invalid header checksum [ 370.520472] Bluetooth: Invalid header checksum [ 370.600446] Bluetooth: Invalid header checksum [ 370.630397] Bluetooth: Invalid header checksum [ 370.710721] Bluetooth: Invalid header checksum [ 370.740475] Bluetooth: Invalid header checksum [ 370.820376] Bluetooth: Invalid header checksum [ 370.850937] Bluetooth: Invalid header checksum [ 370.930520] Bluetooth: Invalid header checksum [ 370.960490] Bluetooth: Invalid header checksum [ 371.040448] Bluetooth: Invalid header checksum [ 371.070706] Bluetooth: Invalid header checksum [ 371.150558] Bluetooth: Invalid header checksum [ 371.180431] Bluetooth: Invalid header checksum [ 371.260434] Bluetooth: Invalid header checksum [ 371.290357] Bluetooth: Invalid header checksum [ 371.370484] Bluetooth: Invalid header checksum [ 371.400658] Bluetooth: Invalid header checksum [ 371.480453] Bluetooth: Invalid header checksum [ 371.510475] Bluetooth: Invalid header checksum [ 371.590540] Bluetooth: Invalid header checksum [ 371.620462] Bluetooth: Invalid header checksum [ 371.700422] Bluetooth: Invalid header checksum [ 371.730575] Bluetooth: Invalid header checksum [ 371.811023] Bluetooth: Invalid header checksum [ 371.840431] Bluetooth: Invalid header checksum [ 371.920417] Bluetooth: Invalid header checksum [ 371.951287] Bluetooth: Invalid header checksum [ 372.030664] Bluetooth: Invalid header checksum [ 372.060505] Bluetooth: Invalid header checksum [ 372.140462] Bluetooth: Invalid header checksum [ 372.170721] Bluetooth: Invalid header checksum [ 372.250460] Bluetooth: Invalid header checksum [ 372.280408] Bluetooth: Invalid header checksum [ 372.360449] Bluetooth: Invalid header checksum [ 372.390493] Bluetooth: Invalid header checksum [ 372.470488] Bluetooth: Invalid header checksum [ 372.500497] Bluetooth: Invalid header checksum [ 372.580453] Bluetooth: Invalid header checksum [ 372.610458] Bluetooth: Invalid header checksum [ 372.690448] Bluetooth: Invalid header checksum [ 372.720428] Bluetooth: Invalid header checksum [ 372.800423] Bluetooth: Invalid header checksum [ 372.830717] Bluetooth: Invalid header checksum [ 372.910772] Bluetooth: Invalid header checksum [ 372.940441] Bluetooth: Invalid header checksum [ 373.020440] Bluetooth: Invalid header checksum [ 373.050953] Bluetooth: Invalid header checksum [ 373.130559] Bluetooth: Invalid header checksum [ 373.160443] Bluetooth: Invalid header checksum [ 373.240469] Bluetooth: Invalid header checksum [ 373.270717] Bluetooth: Invalid header checksum [ 373.350344] Bluetooth: Invalid header checksum [ 373.380468] Bluetooth: Invalid header checksum [ 373.460444] Bluetooth: Invalid header checksum [ 373.490752] Bluetooth: Invalid header checksum [ 373.570528] Bluetooth: Invalid header checksum [ 373.600511] Bluetooth: Invalid header checksum [ 373.680491] Bluetooth: Invalid header checksum [ 373.710484] Bluetooth: Invalid header checksum [ 373.790515] Bluetooth: Invalid header checksum [ 373.820399] Bluetooth: Invalid header checksum [ 373.900442] Bluetooth: Invalid header checksum [ 373.930703] Bluetooth: Invalid header checksum [ 374.011051] Bluetooth: Invalid header checksum [ 374.040454] Bluetooth: Invalid header checksum [ 374.120462] Bluetooth: Invalid header checksum [ 374.151042] Bluetooth: Invalid header checksum [ 374.230386] Bluetooth: Invalid header checksum [ 374.260454] Bluetooth: Invalid header checksum [ 374.340446] Bluetooth: Invalid header checksum [ 374.370542] Bluetooth: Invalid header checksum [ 374.450485] Bluetooth: Invalid header checksum [ 374.480444] Bluetooth: Invalid header checksum [ 374.560476] Bluetooth: Invalid header checksum [ 374.590361] Bluetooth: Invalid header checksum [ 374.670514] Bluetooth: Invalid header checksum [ 374.700496] Bluetooth: Invalid header checksum [ 374.780444] Bluetooth: Invalid header checksum [ 374.810548] Bluetooth: Invalid header checksum [ 374.890464] Bluetooth: Invalid header checksum [ 374.920433] Bluetooth: Invalid header checksum [ 375.000423] Bluetooth: Invalid header checksum [ 375.030664] Bluetooth: Invalid header checksum [ 375.111079] Bluetooth: Invalid header checksum [ 375.140466] Bluetooth: Invalid header checksum [ 375.220429] Bluetooth: Invalid header checksum [ 375.250557] Bluetooth: Invalid header checksum [ 375.330524] Bluetooth: Invalid header checksum [ 375.360420] Bluetooth: Invalid header checksum [ 375.440449] Bluetooth: Invalid header checksum [ 375.470562] Bluetooth: Invalid header checksum [ 375.550533] Bluetooth: Invalid header checksum [ 375.580454] Bluetooth: Invalid header checksum [ 375.660432] Bluetooth: Invalid header checksum [ 375.690548] Bluetooth: Invalid header checksum [ 375.770458] Bluetooth: Invalid header checksum [ 375.800360] Bluetooth: Invalid header checksum [ 375.880431] Bluetooth: Invalid header checksum [ 375.911092] Bluetooth: Invalid header checksum [ 375.990617] Bluetooth: Invalid header checksum [ 376.020443] Bluetooth: Invalid header checksum [ 376.100455] Bluetooth: Invalid header checksum [ 376.130382] Bluetooth: Invalid header checksum [ 376.210499] Bluetooth: Invalid header checksum [ 376.240438] Bluetooth: Invalid header checksum [ 376.320468] Bluetooth: Invalid header checksum [ 376.350376] Bluetooth: Invalid header checksum [ 376.430483] Bluetooth: Invalid header checksum [ 376.460514] Bluetooth: Invalid header checksum [ 376.540548] Bluetooth: Invalid header checksum [ 376.570661] Bluetooth: Invalid header checksum [ 376.650451] Bluetooth: Invalid header checksum [ 376.680446] Bluetooth: Invalid header checksum [ 376.760441] Bluetooth: Invalid header checksum [ 376.793087] Bluetooth: Invalid header checksum [ 376.870672] Bluetooth: Invalid header checksum [ 376.900492] Bluetooth: Invalid header checksum [ 376.980452] Bluetooth: Invalid header checksum [ 377.010992] Bluetooth: Invalid header checksum [ 377.090529] Bluetooth: Invalid header checksum [ 377.120499] Bluetooth: Invalid header checksum [ 377.200500] Bluetooth: Invalid header checksum [ 377.230700] Bluetooth: Invalid header checksum [ 377.310494] Bluetooth: Invalid header checksum [ 377.340472] Bluetooth: Invalid header checksum [ 377.420443] Bluetooth: Invalid header checksum [ 377.450681] Bluetooth: Invalid header checksum [ 377.530690] Bluetooth: Invalid header checksum [ 377.560446] Bluetooth: Invalid header checksum [ 377.640439] Bluetooth: Invalid header checksum [ 377.671137] Bluetooth: Invalid header checksum [ 377.750502] Bluetooth: Invalid header checksum [ 377.780365] Bluetooth: Invalid header checksum [ 377.860423] Bluetooth: Invalid header checksum [ 377.890419] Bluetooth: Invalid header checksum [ 377.970396] Bluetooth: Invalid header checksum [ 378.000441] Bluetooth: Invalid header checksum [ 378.080480] Bluetooth: Invalid header checksum [ 378.110360] Bluetooth: Invalid header checksum [ 378.190373] Bluetooth: Invalid header checksum [ 378.220464] Bluetooth: Invalid header checksum [ 378.300502] Bluetooth: Invalid header checksum [ 378.330578] Bluetooth: Invalid header checksum [ 378.410706] Bluetooth: Invalid header checksum [ 378.440498] Bluetooth: Invalid header checksum [ 378.520453] Bluetooth: Invalid header checksum [ 378.550530] Bluetooth: Invalid header checksum [ 378.631119] Bluetooth: Invalid header checksum [ 378.660473] Bluetooth: Invalid header checksum [ 378.740431] Bluetooth: Invalid header checksum [ 378.770989] Bluetooth: Invalid header checksum [ 378.850412] Bluetooth: Invalid header checksum [ 378.880476] Bluetooth: Invalid header checksum [ 378.960440] Bluetooth: Invalid header checksum [ 378.990569] Bluetooth: Invalid header checksum [ 379.070477] Bluetooth: Invalid header checksum [ 379.100443] Bluetooth: Invalid header checksum [ 379.180450] Bluetooth: Invalid header checksum [ 379.210361] Bluetooth: Invalid header checksum [ 379.290385] Bluetooth: Invalid header checksum [ 379.320439] Bluetooth: Invalid header checksum [ 379.400575] Bluetooth: Invalid header checksum [ 379.430542] Bluetooth: Invalid header checksum [ 379.510502] Bluetooth: Invalid header checksum [ 379.540564] Bluetooth: Invalid header checksum [ 379.620357] Bluetooth: Invalid header checksum [ 379.650414] Bluetooth: Invalid header checksum [ 379.730408] Bluetooth: Invalid header checksum [ 379.760575] Bluetooth: Invalid header checksum [ 379.840567] Bluetooth: Invalid header checksum [ 379.870502] Bluetooth: Invalid header checksum [ 379.950443] Bluetooth: Invalid header checksum [ 379.980907] Bluetooth: Invalid header checksum [ 380.060428] Bluetooth: Invalid header checksum [ 380.090488] Bluetooth: Invalid header checksum [ 380.170415] Bluetooth: Invalid header checksum [ 380.200561] Bluetooth: Invalid header checksum [ 380.280525] Bluetooth: Invalid header checksum [ 380.310469] Bluetooth: Invalid header checksum [ 380.390362] Bluetooth: Invalid header checksum [ 380.420724] Bluetooth: Invalid header checksum [ 380.500576] Bluetooth: Invalid header checksum [ 380.530551] Bluetooth: Invalid header checksum [ 380.610502] Bluetooth: Invalid header checksum [ 380.640508] Bluetooth: Invalid header checksum [ 380.720578] Bluetooth: Invalid header checksum [ 380.750515] Bluetooth: Invalid header checksum [ 380.830540] Bluetooth: Invalid header checksum [ 380.860675] Bluetooth: Invalid header checksum [ 380.959558] Bluetooth: Invalid header checksum [ 380.970535] Bluetooth: Invalid header checksum [ 381.072689] Bluetooth: Invalid header checksum [ 381.080810] Bluetooth: Invalid header checksum [ 381.152967] binder: send failed reply for transaction 2 to 7289:7293 [ 381.160825] Bluetooth: Invalid header checksum [ 381.174105] binder: send failed reply for transaction 5, target dead [ 381.185449] binder: send failed reply for transaction 8, target dead [ 381.193523] binder: send failed reply for transaction 11, target dead [ 381.204793] binder: send failed reply for transaction 12, target dead [ 381.212012] binder: send failed reply for transaction 13, target dead [ 381.219084] binder: send failed reply for transaction 15, target dead [ 381.226341] binder: send failed reply for transaction 17, target dead [ 381.233290] binder: send failed reply for transaction 19, target dead [ 381.242919] binder: undelivered TRANSACTION_ERROR: 29189 [ 381.270593] Bluetooth: Invalid header checksum [ 381.380855] Bluetooth: Invalid header checksum [ 381.490561] Bluetooth: Invalid header checksum [ 381.600643] Bluetooth: Invalid header checksum [ 381.710583] Bluetooth: Invalid header checksum [ 381.820649] Bluetooth: Invalid header checksum [ 381.930564] Bluetooth: Invalid header checksum [ 382.040591] Bluetooth: Invalid header checksum [ 382.150523] Bluetooth: Invalid header checksum [ 382.260545] Bluetooth: Invalid header checksum [ 382.370432] Bluetooth: Invalid header checksum [ 382.480557] Bluetooth: Invalid header checksum [ 382.590705] Bluetooth: Invalid header checksum [ 382.700554] Bluetooth: Invalid header checksum [ 382.810673] Bluetooth: Invalid header checksum [ 382.920614] Bluetooth: Invalid header checksum [ 383.030899] Bluetooth: Invalid header checksum [ 383.140578] Bluetooth: Invalid header checksum [ 383.250753] Bluetooth: Invalid header checksum [ 383.360523] Bluetooth: Invalid header checksum [ 383.470600] Bluetooth: Invalid header checksum [ 383.580604] Bluetooth: Invalid header checksum [ 383.690576] Bluetooth: Invalid header checksum [ 383.800580] Bluetooth: Invalid header checksum [ 383.910744] Bluetooth: Invalid header checksum [ 384.020550] Bluetooth: Invalid header checksum [ 384.130646] Bluetooth: Invalid header checksum [ 384.240512] Bluetooth: Invalid header checksum [ 384.350484] Bluetooth: Invalid header checksum [ 384.460648] Bluetooth: Invalid header checksum [ 384.570547] Bluetooth: Invalid header checksum [ 384.680668] Bluetooth: Invalid header checksum [ 384.790608] Bluetooth: Invalid header checksum [ 384.900636] Bluetooth: Invalid header checksum [ 385.010573] Bluetooth: Invalid header checksum [ 385.120710] Bluetooth: Invalid header checksum [ 385.230589] Bluetooth: Invalid header checksum [ 385.340677] Bluetooth: Invalid header checksum [ 385.450597] Bluetooth: Invalid header checksum [ 385.560674] Bluetooth: Invalid header checksum [ 385.670424] Bluetooth: Invalid header checksum [ 385.780453] Bluetooth: Invalid header checksum [ 385.890587] Bluetooth: Invalid header checksum [ 386.000663] Bluetooth: Invalid header checksum [ 386.110619] Bluetooth: Invalid header checksum [ 386.220636] Bluetooth: Invalid header checksum [ 386.330562] Bluetooth: Invalid header checksum [ 386.440647] Bluetooth: Invalid header checksum [ 386.550603] Bluetooth: Invalid header checksum [ 386.660668] Bluetooth: Invalid header checksum [ 386.770683] Bluetooth: Invalid header checksum [ 386.880514] Bluetooth: Invalid header checksum [ 386.990604] Bluetooth: Invalid header checksum [ 387.100560] Bluetooth: Invalid header checksum [ 387.210546] Bluetooth: Invalid header checksum [ 387.320443] Bluetooth: Invalid header checksum [ 387.430681] Bluetooth: Invalid header checksum [ 387.540579] Bluetooth: Invalid header checksum [ 387.650572] Bluetooth: Invalid header checksum [ 387.760680] Bluetooth: Invalid header checksum [ 387.870529] Bluetooth: Invalid header checksum [ 387.980744] Bluetooth: Invalid header checksum [ 388.090631] Bluetooth: Invalid header checksum [ 388.200658] Bluetooth: Invalid header checksum [ 388.310465] Bluetooth: Invalid header checksum [ 388.420558] Bluetooth: Invalid header checksum [ 388.530589] Bluetooth: Invalid header checksum [ 388.640813] Bluetooth: Invalid header checksum [ 388.750585] Bluetooth: Invalid header checksum [ 388.860680] Bluetooth: Invalid header checksum [ 388.970705] Bluetooth: Invalid header checksum [ 389.080668] Bluetooth: Invalid header checksum [ 389.190562] Bluetooth: Invalid header checksum [ 389.301133] Bluetooth: Invalid header checksum [ 389.410526] Bluetooth: Invalid header checksum [ 389.520700] Bluetooth: Invalid header checksum [ 389.630520] Bluetooth: Invalid header checksum [ 389.740641] Bluetooth: Invalid header checksum [ 389.850547] Bluetooth: Invalid header checksum [ 389.960681] Bluetooth: Invalid header checksum [ 390.070599] Bluetooth: Invalid header checksum [ 390.180796] Bluetooth: Invalid header checksum [ 390.290554] Bluetooth: Invalid header checksum [ 390.400666] Bluetooth: Invalid header checksum [ 390.510618] Bluetooth: Invalid header checksum [ 390.620665] Bluetooth: Invalid header checksum [ 390.730571] Bluetooth: Invalid header checksum [ 390.840726] Bluetooth: Invalid header checksum [ 390.950392] Bluetooth: Invalid header checksum [ 391.060346] Bluetooth: Invalid header checksum [ 391.170361] Bluetooth: Invalid header checksum [ 391.280507] Bluetooth: Invalid header checksum [ 391.390433] Bluetooth: Invalid header checksum [ 391.500575] Bluetooth: Invalid header checksum [ 391.610434] Bluetooth: Invalid header checksum [ 391.720557] Bluetooth: Invalid header checksum [ 391.830370] Bluetooth: Invalid header checksum [ 391.940992] Bluetooth: Invalid header checksum [ 392.050432] Bluetooth: Invalid header checksum [ 392.160471] Bluetooth: Invalid header checksum [ 392.270452] Bluetooth: Invalid header checksum [ 392.380489] Bluetooth: Invalid header checksum [ 392.490361] Bluetooth: Invalid header checksum [ 392.600363] Bluetooth: Invalid header checksum [ 392.710568] Bluetooth: Invalid header checksum [ 392.820364] Bluetooth: Invalid header checksum [ 392.930334] Bluetooth: Invalid header checksum [ 393.050312] Bluetooth: Invalid header checksum [ 393.150357] Bluetooth: Invalid header checksum [ 393.260417] Bluetooth: Invalid header checksum [ 393.370350] Bluetooth: Invalid header checksum [ 393.480316] Bluetooth: Invalid header checksum [ 393.590312] Bluetooth: Invalid header checksum [ 393.700315] Bluetooth: Invalid header checksum [ 393.810356] Bluetooth: Invalid header checksum [ 393.920318] Bluetooth: Invalid header checksum [ 394.030341] Bluetooth: Invalid header checksum [ 394.140317] Bluetooth: Invalid header checksum [ 394.250385] Bluetooth: Invalid header checksum [ 394.360488] Bluetooth: Invalid header checksum [ 394.470379] Bluetooth: Invalid header checksum [ 394.580448] Bluetooth: Invalid header checksum [ 394.690319] Bluetooth: Invalid header checksum [ 394.810369] Bluetooth: Invalid header checksum [ 394.920443] Bluetooth: Invalid header checksum [ 395.030760] Bluetooth: Invalid header checksum [ 395.140545] Bluetooth: Invalid header checksum [ 395.250365] Bluetooth: Invalid header checksum [ 395.360430] Bluetooth: Invalid header checksum [ 395.470369] Bluetooth: Invalid header checksum [ 395.580297] Bluetooth: Invalid header checksum [ 395.690351] Bluetooth: Invalid header checksum [ 395.800336] Bluetooth: Invalid header checksum [ 395.910380] Bluetooth: Invalid header checksum [ 396.020321] Bluetooth: Invalid header checksum [ 396.130341] Bluetooth: Invalid header checksum [ 396.240411] Bluetooth: Invalid header checksum [ 396.350320] Bluetooth: Invalid header checksum [ 396.460303] Bluetooth: Invalid header checksum [ 396.570347] Bluetooth: Invalid header checksum [ 396.680360] Bluetooth: Invalid header checksum [ 396.790483] Bluetooth: Invalid header checksum [ 396.900668] Bluetooth: Invalid header checksum [ 397.010334] Bluetooth: Invalid header checksum [ 397.120409] Bluetooth: Invalid header checksum [ 397.230390] Bluetooth: Invalid header checksum [ 397.340437] Bluetooth: Invalid header checksum [ 397.450335] Bluetooth: Invalid header checksum [ 397.560351] Bluetooth: Invalid header checksum [ 397.670345] Bluetooth: Invalid header checksum [ 397.780357] Bluetooth: Invalid header checksum [ 397.890343] Bluetooth: Invalid header checksum [ 398.000349] Bluetooth: Invalid header checksum [ 398.110387] Bluetooth: Invalid header checksum [ 398.220330] Bluetooth: Invalid header checksum [ 398.330389] Bluetooth: Invalid header checksum [ 398.440502] Bluetooth: Invalid header checksum [ 398.550444] Bluetooth: Invalid header checksum [ 398.660485] Bluetooth: Invalid header checksum [ 398.770397] Bluetooth: Invalid header checksum [ 398.880456] Bluetooth: Invalid header checksum [ 398.990422] Bluetooth: Invalid header checksum [ 399.100433] Bluetooth: Invalid header checksum [ 399.210309] Bluetooth: Invalid header checksum [ 399.320445] Bluetooth: Invalid header checksum [ 399.430344] Bluetooth: Invalid header checksum [ 399.540298] Bluetooth: Invalid header checksum [ 399.650385] Bluetooth: Invalid header checksum [ 399.770386] Bluetooth: Invalid header checksum [ 399.870367] Bluetooth: Invalid header checksum [ 399.980370] Bluetooth: Invalid header checksum [ 400.090376] Bluetooth: Invalid header checksum [ 400.200310] Bluetooth: Invalid header checksum [ 400.310399] Bluetooth: Invalid header checksum [ 400.420472] Bluetooth: Invalid header checksum [ 400.530366] Bluetooth: Invalid header checksum [ 400.640484] Bluetooth: Invalid header checksum [ 400.750362] Bluetooth: Invalid header checksum [ 400.860476] Bluetooth: Invalid header checksum [ 400.970379] Bluetooth: Invalid header checksum [ 401.080444] Bluetooth: Invalid header checksum [ 401.190435] Bluetooth: Invalid header checksum [ 401.300354] Bluetooth: Invalid header checksum [ 401.410378] Bluetooth: Invalid header checksum [ 401.520440] Bluetooth: Invalid header checksum [ 401.630380] Bluetooth: Invalid header checksum [ 401.740460] Bluetooth: Invalid header checksum [ 401.850345] Bluetooth: Invalid header checksum [ 401.960468] Bluetooth: Invalid header checksum [ 402.070407] Bluetooth: Invalid header checksum [ 402.180248] Bluetooth: Invalid header checksum [ 402.290370] Bluetooth: Invalid header checksum [ 402.410345] Bluetooth: Invalid header checksum [ 402.520505] Bluetooth: Invalid header checksum [ 402.630473] Bluetooth: Invalid header checksum [ 402.740467] Bluetooth: Invalid header checksum [ 402.850379] Bluetooth: Invalid header checksum [ 402.960454] Bluetooth: Invalid header checksum [ 403.070403] Bluetooth: Invalid header checksum [ 403.180348] Bluetooth: Invalid header checksum [ 403.290302] Bluetooth: Invalid header checksum [ 403.400328] Bluetooth: Invalid header checksum [ 403.510342] Bluetooth: Invalid header checksum [ 403.620295] Bluetooth: Invalid header checksum [ 403.730253] Bluetooth: Invalid header checksum [ 403.840348] Bluetooth: Invalid header checksum [ 403.950385] Bluetooth: Invalid header checksum [ 404.060450] Bluetooth: Invalid header checksum [ 404.170385] Bluetooth: Invalid header checksum [ 404.280467] Bluetooth: Invalid header checksum [ 404.390335] Bluetooth: Invalid header checksum [ 404.500376] Bluetooth: Invalid header checksum [ 404.610367] Bluetooth: Invalid header checksum [ 404.720445] Bluetooth: Invalid header checksum [ 404.830375] Bluetooth: Invalid header checksum [ 404.940460] Bluetooth: Invalid header checksum [ 405.050406] Bluetooth: Invalid header checksum [ 405.160397] Bluetooth: Invalid header checksum [ 405.270418] Bluetooth: Invalid header checksum [ 405.380411] Bluetooth: Invalid header checksum [ 405.490435] Bluetooth: Invalid header checksum [ 405.600446] Bluetooth: Invalid header checksum [ 405.710410] Bluetooth: Invalid header checksum [ 405.820428] Bluetooth: Invalid header checksum [ 405.930359] Bluetooth: Invalid header checksum [ 406.040506] Bluetooth: Invalid header checksum [ 406.150348] Bluetooth: Invalid header checksum [ 406.260997] Bluetooth: Invalid header checksum [ 406.370358] Bluetooth: Invalid header checksum [ 406.480456] Bluetooth: Invalid header checksum [ 406.590364] Bluetooth: Invalid header checksum [ 406.700379] Bluetooth: Invalid header checksum [ 406.810379] Bluetooth: Invalid header checksum [ 406.920592] Bluetooth: Invalid header checksum [ 407.030806] Bluetooth: Invalid header checksum [ 407.140490] Bluetooth: Invalid header checksum [ 407.250394] Bluetooth: Invalid header checksum [ 407.360291] Bluetooth: Invalid header checksum [ 407.470407] Bluetooth: Invalid header checksum [ 407.580456] Bluetooth: Invalid header checksum [ 407.690479] Bluetooth: Invalid header checksum [ 407.800394] Bluetooth: Invalid header checksum [ 407.910989] Bluetooth: Invalid header checksum [ 408.020369] Bluetooth: Invalid header checksum [ 408.130363] Bluetooth: Invalid header checksum [ 408.240364] Bluetooth: Invalid header checksum [ 408.350463] Bluetooth: Invalid header checksum [ 408.460349] Bluetooth: Invalid header checksum [ 408.570441] Bluetooth: Invalid header checksum [ 408.680350] Bluetooth: Invalid header checksum [ 408.790413] Bluetooth: Invalid header checksum [ 408.900361] Bluetooth: Invalid header checksum [ 409.010452] Bluetooth: Invalid header checksum [ 409.120309] Bluetooth: Invalid header checksum [ 409.230338] Bluetooth: Invalid header checksum [ 409.340329] Bluetooth: Invalid header checksum [ 409.460296] Bluetooth: Invalid header checksum [ 409.570339] Bluetooth: Invalid header checksum [ 409.680321] Bluetooth: Invalid header checksum [ 409.790362] Bluetooth: Invalid header checksum [ 409.900225] Bluetooth: Invalid header checksum [ 410.010410] Bluetooth: Invalid header checksum [ 410.120324] Bluetooth: Invalid header checksum [ 410.230445] Bluetooth: Invalid header checksum [ 410.340341] Bluetooth: Invalid header checksum [ 410.450265] Bluetooth: Invalid header checksum [ 410.560285] Bluetooth: Invalid header checksum [ 410.670296] Bluetooth: Invalid header checksum [ 410.780322] Bluetooth: Invalid header checksum [ 410.890556] Bluetooth: Invalid header checksum [ 411.000326] Bluetooth: Invalid header checksum [ 411.110383] Bluetooth: Invalid header checksum [ 411.220365] Bluetooth: Invalid header checksum [ 411.330542] Bluetooth: Invalid header checksum [ 411.440299] Bluetooth: Invalid header checksum [ 411.550266] Bluetooth: Invalid header checksum [ 411.660354] Bluetooth: Invalid header checksum [ 411.770283] Bluetooth: Invalid header checksum [ 411.880216] Bluetooth: Invalid header checksum [ 411.990688] Bluetooth: Invalid header checksum [ 412.100333] Bluetooth: Invalid header checksum [ 412.210259] Bluetooth: Invalid header checksum [ 412.320326] Bluetooth: Invalid header checksum [ 412.430356] Bluetooth: Invalid header checksum [ 412.540451] Bluetooth: Invalid header checksum [ 412.660379] Bluetooth: Invalid header checksum [ 412.770318] Bluetooth: Invalid header checksum [ 412.880537] Bluetooth: Invalid header checksum [ 412.990332] Bluetooth: Invalid header checksum [ 413.100422] Bluetooth: Invalid header checksum [ 413.210317] Bluetooth: Invalid header checksum [ 413.320386] Bluetooth: Invalid header checksum [ 413.430449] Bluetooth: Invalid header checksum [ 413.540376] Bluetooth: Invalid header checksum [ 413.650327] Bluetooth: Invalid header checksum [ 413.760368] Bluetooth: Invalid header checksum [ 413.870323] Bluetooth: Invalid header checksum [ 413.980566] Bluetooth: Invalid header checksum [ 414.090302] Bluetooth: Invalid header checksum [ 414.200295] Bluetooth: Invalid header checksum [ 414.310339] Bluetooth: Invalid header checksum [ 414.420315] Bluetooth: Invalid header checksum [ 414.530268] Bluetooth: Invalid header checksum [ 414.640352] Bluetooth: Invalid header checksum [ 414.750338] Bluetooth: Invalid header checksum [ 414.860573] Bluetooth: Invalid header checksum [ 414.970340] Bluetooth: Invalid header checksum [ 415.080425] Bluetooth: Invalid header checksum [ 415.190997] Bluetooth: Invalid header checksum [ 415.300388] Bluetooth: Invalid header checksum [ 415.410361] Bluetooth: Invalid header checksum [ 415.520283] Bluetooth: Invalid header checksum [ 415.630388] Bluetooth: Invalid header checksum [ 415.740398] Bluetooth: Invalid header checksum [ 415.850371] Bluetooth: Invalid header checksum [ 415.960310] Bluetooth: Invalid header checksum [ 416.070425] Bluetooth: Invalid header checksum [ 416.180286] Bluetooth: Invalid header checksum [ 416.290304] Bluetooth: Invalid header checksum [ 416.410344] Bluetooth: Invalid header checksum [ 416.520355] Bluetooth: Invalid header checksum [ 416.630410] Bluetooth: Invalid header checksum [ 416.740367] Bluetooth: Invalid header checksum [ 416.850345] Bluetooth: Invalid header checksum [ 416.960331] Bluetooth: Invalid header checksum [ 417.070358] Bluetooth: Invalid header checksum [ 417.180595] Bluetooth: Invalid header checksum [ 417.290366] Bluetooth: Invalid header checksum [ 417.400431] Bluetooth: Invalid header checksum [ 417.510371] Bluetooth: Invalid header checksum [ 417.620278] Bluetooth: Invalid header checksum [ 417.730356] Bluetooth: Invalid header checksum [ 417.840409] Bluetooth: Invalid header checksum [ 417.950450] Bluetooth: Invalid header checksum [ 418.060436] Bluetooth: Invalid header checksum [ 418.170338] Bluetooth: Invalid header checksum [ 418.280300] Bluetooth: Invalid header checksum [ 418.390272] Bluetooth: Invalid header checksum [ 418.500321] Bluetooth: Invalid header checksum [ 418.610348] Bluetooth: Invalid header checksum [ 418.730359] Bluetooth: Invalid header checksum [ 418.840451] Bluetooth: Invalid header checksum [ 418.950361] Bluetooth: Invalid header checksum [ 419.060320] Bluetooth: Invalid header checksum [ 419.170385] Bluetooth: Invalid header checksum [ 419.280612] Bluetooth: Invalid header checksum [ 419.390372] Bluetooth: Invalid header checksum [ 419.500396] Bluetooth: Invalid header checksum [ 419.610360] Bluetooth: Invalid header checksum [ 419.722627] Bluetooth: Invalid header checksum [ 419.830351] Bluetooth: Invalid header checksum [ 419.940402] Bluetooth: Invalid header checksum [ 420.050403] Bluetooth: Invalid header checksum [ 420.160346] Bluetooth: Invalid header checksum [ 420.270355] Bluetooth: Invalid header checksum [ 420.380592] Bluetooth: Invalid header checksum [ 420.490360] Bluetooth: Invalid header checksum [ 420.600290] Bluetooth: Invalid header checksum [ 420.710375] Bluetooth: Invalid header checksum [ 420.820391] Bluetooth: Invalid header checksum [ 420.930340] Bluetooth: Invalid header checksum [ 421.040918] Bluetooth: Invalid header checksum [ 421.150369] Bluetooth: Invalid header checksum [ 421.260270] Bluetooth: Invalid header checksum [ 421.370346] Bluetooth: Invalid header checksum [ 421.480425] Bluetooth: Invalid header checksum [ 421.590433] Bluetooth: Invalid header checksum [ 421.700274] Bluetooth: Invalid header checksum [ 421.810355] Bluetooth: Invalid header checksum [ 421.920565] Bluetooth: Invalid header checksum [ 422.030328] Bluetooth: Invalid header checksum [ 422.140406] Bluetooth: Invalid header checksum [ 422.250347] Bluetooth: Invalid header checksum [ 422.360316] Bluetooth: Invalid header checksum [ 422.470273] Bluetooth: Invalid header checksum [ 422.580293] Bluetooth: Invalid header checksum [ 422.690346] Bluetooth: Invalid header checksum [ 422.800384] Bluetooth: Invalid header checksum [ 422.910380] Bluetooth: Invalid header checksum [ 423.020369] Bluetooth: Invalid header checksum [ 423.130964] Bluetooth: Invalid header checksum [ 423.240361] Bluetooth: Invalid header checksum [ 423.350420] Bluetooth: Invalid header checksum [ 423.460318] Bluetooth: Invalid header checksum [ 423.570406] Bluetooth: Invalid header checksum [ 423.680357] Bluetooth: Invalid header checksum [ 423.790570] Bluetooth: Invalid header checksum [ 423.900376] Bluetooth: Invalid header checksum [ 424.010415] Bluetooth: Invalid header checksum [ 424.120302] Bluetooth: Invalid header checksum [ 424.230288] Bluetooth: Invalid header checksum [ 424.340385] Bluetooth: Invalid header checksum [ 424.450425] Bluetooth: Invalid header checksum [ 424.560383] Bluetooth: Invalid header checksum [ 424.670976] Bluetooth: Invalid header checksum [ 424.780380] Bluetooth: Invalid header checksum [ 424.890437] Bluetooth: Invalid header checksum [ 425.000374] Bluetooth: Invalid header checksum [ 425.110427] Bluetooth: Invalid header checksum [ 425.220315] Bluetooth: Invalid header checksum [ 425.330425] Bluetooth: Invalid header checksum [ 425.440305] Bluetooth: Invalid header checksum [ 425.550281] Bluetooth: Invalid header checksum [ 425.660367] Bluetooth: Invalid header checksum [ 425.770275] Bluetooth: Invalid header checksum [ 425.880395] Bluetooth: Invalid header checksum [ 425.990614] Bluetooth: Invalid header checksum [ 426.100351] Bluetooth: Invalid header checksum [ 426.210509] Bluetooth: Invalid header checksum [ 426.320352] Bluetooth: Invalid header checksum [ 426.430277] Bluetooth: Invalid header checksum [ 426.540377] Bluetooth: Invalid header checksum [ 426.651019] Bluetooth: Invalid header checksum [ 426.760372] Bluetooth: Invalid header checksum [ 426.870354] Bluetooth: Invalid header checksum [ 426.980337] Bluetooth: Invalid header checksum [ 427.090368] Bluetooth: Invalid header checksum [ 427.200289] Bluetooth: Invalid header checksum [ 427.310394] Bluetooth: Invalid header checksum [ 427.420334] Bluetooth: Invalid header checksum [ 427.530310] Bluetooth: Invalid header checksum [ 427.650334] Bluetooth: Invalid header checksum [ 427.770306] Bluetooth: Invalid header checksum [ 427.880331] Bluetooth: Invalid header checksum [ 427.991221] Bluetooth: Invalid header checksum [ 428.100366] Bluetooth: Invalid header checksum [ 428.210360] Bluetooth: Invalid header checksum [ 428.330437] Bluetooth: Invalid header checksum [ 428.440320] Bluetooth: Invalid header checksum [ 428.550384] Bluetooth: Invalid header checksum [ 428.660317] Bluetooth: Invalid header checksum [ 428.770328] Bluetooth: Invalid header checksum [ 428.890547] Bluetooth: Invalid header checksum [ 429.000302] Bluetooth: Invalid header checksum [ 429.110494] Bluetooth: Invalid header checksum [ 429.220308] Bluetooth: Invalid header checksum [ 429.330277] Bluetooth: Invalid header checksum [ 429.440324] Bluetooth: Invalid header checksum [ 429.550427] Bluetooth: Invalid header checksum [ 429.660361] Bluetooth: Invalid header checksum [ 429.770364] Bluetooth: Invalid header checksum [ 429.880305] Bluetooth: Invalid header checksum [ 429.990626] Bluetooth: Invalid header checksum [ 430.100354] Bluetooth: Invalid header checksum [ 430.210309] Bluetooth: Invalid header checksum [ 430.320382] Bluetooth: Invalid header checksum [ 430.430560] Bluetooth: Invalid header checksum [ 430.540340] Bluetooth: Invalid header checksum [ 430.650423] Bluetooth: Invalid header checksum [ 430.760379] Bluetooth: Invalid header checksum [ 430.870425] Bluetooth: Invalid header checksum [ 430.980359] Bluetooth: Invalid header checksum [ 431.090297] Bluetooth: Invalid header checksum [ 431.200311] Bluetooth: Invalid header checksum [ 431.310574] Bluetooth: Invalid header checksum [ 431.420341] Bluetooth: Invalid header checksum [ 431.530438] Bluetooth: Invalid header checksum [ 431.640326] Bluetooth: Invalid header checksum [ 431.750500] Bluetooth: Invalid header checksum [ 431.860382] Bluetooth: Invalid header checksum [ 431.970914] Bluetooth: Invalid header checksum [ 432.080362] Bluetooth: Invalid header checksum [ 432.190303] Bluetooth: Invalid header checksum [ 432.300349] Bluetooth: Invalid header checksum [ 432.410450] Bluetooth: Invalid header checksum [ 432.520359] Bluetooth: Invalid header checksum [ 432.630452] Bluetooth: Invalid header checksum [ 432.740324] Bluetooth: Invalid header checksum [ 432.850405] Bluetooth: Invalid header checksum [ 432.960397] Bluetooth: Invalid header checksum [ 433.070353] Bluetooth: Invalid header checksum [ 433.180451] Bluetooth: Invalid header checksum [ 433.290266] Bluetooth: Invalid header checksum [ 433.400444] Bluetooth: Invalid header checksum [ 433.510429] Bluetooth: Invalid header checksum [ 433.620415] Bluetooth: Invalid header checksum [ 433.730506] Bluetooth: Invalid header checksum [ 433.840417] Bluetooth: Invalid header checksum [ 433.950469] Bluetooth: Invalid header checksum [ 434.060436] Bluetooth: Invalid header checksum [ 434.170351] Bluetooth: Invalid header checksum [ 434.280443] Bluetooth: Invalid header checksum [ 434.390371] Bluetooth: Invalid header checksum [ 434.500516] Bluetooth: Invalid header checksum [ 434.610522] Bluetooth: Invalid header checksum [ 434.720421] Bluetooth: Invalid header checksum [ 434.830530] Bluetooth: Invalid header checksum [ 434.940438] Bluetooth: Invalid header checksum [ 435.050443] Bluetooth: Invalid header checksum [ 435.160348] Bluetooth: Invalid header checksum [ 435.270456] Bluetooth: Invalid header checksum [ 435.380423] Bluetooth: Invalid header checksum [ 435.490544] Bluetooth: Invalid header checksum [ 435.600454] Bluetooth: Invalid header checksum [ 435.710503] Bluetooth: Invalid header checksum [ 435.820442] Bluetooth: Invalid header checksum [ 435.930378] Bluetooth: Invalid header checksum [ 436.040424] Bluetooth: Invalid header checksum [ 436.150480] Bluetooth: Invalid header checksum [ 436.260396] Bluetooth: Invalid header checksum [ 436.370512] Bluetooth: Invalid header checksum [ 436.480390] Bluetooth: Invalid header checksum [ 436.590559] Bluetooth: Invalid header checksum [ 436.700445] Bluetooth: Invalid header checksum [ 436.810342] Bluetooth: Invalid header checksum [ 436.920444] Bluetooth: Invalid header checksum [ 437.030525] Bluetooth: Invalid header checksum [ 437.140463] Bluetooth: Invalid header checksum [ 437.250457] Bluetooth: Invalid header checksum [ 437.360452] Bluetooth: Invalid header checksum [ 437.470395] Bluetooth: Invalid header checksum [ 437.580453] Bluetooth: Invalid header checksum [ 437.690457] Bluetooth: Invalid header checksum [ 437.800427] Bluetooth: Invalid header checksum [ 437.910466] Bluetooth: Invalid header checksum [ 438.020454] Bluetooth: Invalid header checksum [ 438.130581] Bluetooth: Invalid header checksum [ 438.240410] Bluetooth: Invalid header checksum [ 438.350469] Bluetooth: Invalid header checksum [ 438.460484] Bluetooth: Invalid header checksum [ 438.570429] Bluetooth: Invalid header checksum [ 438.680327] Bluetooth: Invalid header checksum [ 438.790454] Bluetooth: Invalid header checksum [ 438.900370] Bluetooth: Invalid header checksum [ 439.010463] Bluetooth: Invalid header checksum [ 439.120396] Bluetooth: Invalid header checksum [ 439.230404] Bluetooth: Invalid header checksum [ 439.340306] Bluetooth: Invalid header checksum [ 439.450321] Bluetooth: Invalid header checksum [ 439.560374] Bluetooth: Invalid header checksum [ 439.675190] Bluetooth: Invalid header checksum [ 439.780474] Bluetooth: Invalid header checksum [ 439.890344] Bluetooth: Invalid header checksum [ 440.000430] Bluetooth: Invalid header checksum [ 440.110325] Bluetooth: Invalid header checksum [ 440.220510] Bluetooth: Invalid header checksum [ 440.330349] Bluetooth: Invalid header checksum [ 440.440408] Bluetooth: Invalid header checksum [ 440.550393] Bluetooth: Invalid header checksum [ 440.660268] Bluetooth: Invalid header checksum [ 440.770351] Bluetooth: Invalid header checksum [ 440.880340] Bluetooth: Invalid header checksum [ 440.990320] Bluetooth: Invalid header checksum [ 441.100272] Bluetooth: Invalid header checksum [ 441.210354] Bluetooth: Invalid header checksum [ 441.320364] Bluetooth: Invalid header checksum [ 441.430372] Bluetooth: Invalid header checksum [ 441.540498] Bluetooth: Invalid header checksum [ 441.650408] Bluetooth: Invalid header checksum [ 441.760419] Bluetooth: Invalid header checksum [ 441.870349] Bluetooth: Invalid header checksum [ 441.980442] Bluetooth: Invalid header checksum [ 442.090369] Bluetooth: Invalid header checksum [ 442.200364] Bluetooth: Invalid header checksum [ 442.310375] Bluetooth: Invalid header checksum [ 442.420296] Bluetooth: Invalid header checksum [ 442.530355] Bluetooth: Invalid header checksum [ 442.640373] Bluetooth: Invalid header checksum [ 442.750416] Bluetooth: Invalid header checksum [ 442.860399] Bluetooth: Invalid header checksum [ 442.970430] Bluetooth: Invalid header checksum [ 443.080330] Bluetooth: Invalid header checksum [ 443.190623] Bluetooth: Invalid header checksum [ 443.300362] Bluetooth: Invalid header checksum [ 443.410390] Bluetooth: Invalid header checksum [ 443.520466] Bluetooth: Invalid header checksum [ 443.630364] Bluetooth: Invalid header checksum [ 443.740465] Bluetooth: Invalid header checksum [ 443.850382] Bluetooth: Invalid header checksum [ 443.960479] Bluetooth: Invalid header checksum [ 444.070478] Bluetooth: Invalid header checksum [ 444.180368] Bluetooth: Invalid header checksum [ 444.290362] Bluetooth: Invalid header checksum [ 444.400400] Bluetooth: Invalid header checksum [ 444.510350] Bluetooth: Invalid header checksum [ 444.620450] Bluetooth: Invalid header checksum [ 444.730376] Bluetooth: Invalid header checksum [ 444.840484] Bluetooth: Invalid header checksum [ 444.950440] Bluetooth: Invalid header checksum [ 445.060505] Bluetooth: Invalid header checksum [ 445.170423] Bluetooth: Invalid header checksum [ 445.280417] Bluetooth: Invalid header checksum [ 445.390417] Bluetooth: Invalid header checksum [ 445.500388] Bluetooth: Invalid header checksum [ 445.610428] Bluetooth: Invalid header checksum [ 445.720348] Bluetooth: Invalid header checksum [ 445.830321] Bluetooth: Invalid header checksum [ 445.940391] Bluetooth: Invalid header checksum [ 446.050430] Bluetooth: Invalid header checksum [ 446.160383] Bluetooth: Invalid header checksum [ 446.270376] Bluetooth: Invalid header checksum [ 446.380468] Bluetooth: Invalid header checksum [ 446.490439] Bluetooth: Invalid header checksum [ 446.600412] Bluetooth: Invalid header checksum [ 446.710489] Bluetooth: Invalid header checksum [ 446.820411] Bluetooth: Invalid header checksum [ 446.930440] Bluetooth: Invalid header checksum [ 447.050340] Bluetooth: Invalid header checksum [ 447.160416] Bluetooth: Invalid header checksum [ 447.270354] Bluetooth: Invalid header checksum [ 447.380394] Bluetooth: Invalid header checksum [ 447.490425] Bluetooth: Invalid header checksum [ 447.600401] Bluetooth: Invalid header checksum [ 447.710438] Bluetooth: Invalid header checksum [ 447.820384] Bluetooth: Invalid header checksum [ 447.930372] Bluetooth: Invalid header checksum [ 448.040347] Bluetooth: Invalid header checksum [ 448.150377] Bluetooth: Invalid header checksum [ 448.260310] Bluetooth: Invalid header checksum [ 448.370438] Bluetooth: Invalid header checksum [ 448.480285] Bluetooth: Invalid header checksum [ 448.590360] Bluetooth: Invalid header checksum [ 448.700434] Bluetooth: Invalid header checksum [ 448.810380] Bluetooth: Invalid header checksum [ 448.920586] Bluetooth: Invalid header checksum [ 449.030740] Bluetooth: Invalid header checksum [ 449.140457] Bluetooth: Invalid header checksum [ 449.250363] Bluetooth: Invalid header checksum [ 449.370419] Bluetooth: Invalid header checksum [ 449.480325] Bluetooth: Invalid header checksum [ 449.590386] Bluetooth: Invalid header checksum [ 449.700275] Bluetooth: Invalid header checksum [ 449.810464] Bluetooth: Invalid header checksum [ 449.920322] Bluetooth: Invalid header checksum [ 450.030694] Bluetooth: Invalid header checksum [ 450.140346] Bluetooth: Invalid header checksum [ 450.250454] Bluetooth: Invalid header checksum [ 450.360372] Bluetooth: Invalid header checksum [ 450.471044] Bluetooth: Invalid header checksum [ 450.580491] Bluetooth: Invalid header checksum [ 450.690344] Bluetooth: Invalid header checksum [ 450.800348] Bluetooth: Invalid header checksum [ 450.910319] Bluetooth: Invalid header checksum [ 451.020424] Bluetooth: Invalid header checksum [ 451.130553] Bluetooth: Invalid header checksum [ 451.240333] Bluetooth: Invalid header checksum [ 451.350418] Bluetooth: Invalid header checksum [ 451.460442] Bluetooth: Invalid header checksum [ 451.570360] Bluetooth: Invalid header checksum [ 451.691422] Bluetooth: Invalid header checksum [ 451.800466] Bluetooth: Invalid header checksum [ 451.910365] Bluetooth: Invalid header checksum [ 452.020501] Bluetooth: Invalid header checksum [ 452.130520] Bluetooth: Invalid header checksum [ 452.240466] Bluetooth: Invalid header checksum [ 452.350561] Bluetooth: Invalid header checksum [ 452.460457] Bluetooth: Invalid header checksum [ 452.570476] Bluetooth: Invalid header checksum [ 452.680475] Bluetooth: Invalid header checksum [ 452.790408] Bluetooth: Invalid header checksum [ 452.900381] Bluetooth: Invalid header checksum [ 453.010521] Bluetooth: Invalid header checksum [ 453.120368] Bluetooth: Invalid header checksum [ 453.230435] Bluetooth: Invalid header checksum [ 453.340497] Bluetooth: Invalid header checksum [ 453.450342] Bluetooth: Invalid header checksum [ 453.560432] Bluetooth: Invalid header checksum [ 453.671110] Bluetooth: Invalid header checksum [ 453.780466] Bluetooth: Invalid header checksum [ 453.890501] Bluetooth: Invalid header checksum [ 454.000467] Bluetooth: Invalid header checksum [ 454.110419] Bluetooth: Invalid header checksum [ 454.220475] Bluetooth: Invalid header checksum [ 454.330507] Bluetooth: Invalid header checksum [ 454.440481] Bluetooth: Invalid header checksum [ 454.550381] Bluetooth: Invalid header checksum [ 454.660448] Bluetooth: Invalid header checksum [ 454.770494] Bluetooth: Invalid header checksum [ 454.880529] Bluetooth: Invalid header checksum [ 454.990501] Bluetooth: Invalid header checksum [ 455.100385] Bluetooth: Invalid header checksum [ 455.210382] Bluetooth: Invalid header checksum [ 455.320384] Bluetooth: Invalid header checksum [ 455.430474] Bluetooth: Invalid header checksum [ 455.540400] Bluetooth: Invalid header checksum [ 455.650572] Bluetooth: Invalid header checksum [ 455.760412] Bluetooth: Invalid header checksum [ 455.870392] Bluetooth: Invalid header checksum [ 455.980419] Bluetooth: Invalid header checksum [ 456.090520] Bluetooth: Invalid header checksum [ 456.200403] Bluetooth: Invalid header checksum [ 456.310527] Bluetooth: Invalid header checksum [ 456.420371] Bluetooth: Invalid header checksum [ 456.530541] Bluetooth: Invalid header checksum [ 456.640367] Bluetooth: Invalid header checksum [ 456.750374] Bluetooth: Invalid header checksum [ 456.860405] Bluetooth: Invalid header checksum [ 456.970357] Bluetooth: Invalid header checksum [ 457.080432] Bluetooth: Invalid header checksum [ 457.190460] Bluetooth: Invalid header checksum [ 457.300463] Bluetooth: Invalid header checksum [ 457.410406] Bluetooth: Invalid header checksum [ 457.520421] Bluetooth: Invalid header checksum [ 457.630505] Bluetooth: Invalid header checksum [ 457.740466] Bluetooth: Invalid header checksum [ 457.850497] Bluetooth: Invalid header checksum [ 457.960446] Bluetooth: Invalid header checksum [ 458.070430] Bluetooth: Invalid header checksum [ 458.180387] Bluetooth: Invalid header checksum [ 458.290359] Bluetooth: Invalid header checksum [ 458.400404] Bluetooth: Invalid header checksum [ 458.510502] Bluetooth: Invalid header checksum [ 458.620425] Bluetooth: Invalid header checksum [ 458.730399] Bluetooth: Invalid header checksum [ 458.840421] Bluetooth: Invalid header checksum [ 458.950738] Bluetooth: Invalid header checksum [ 459.060444] Bluetooth: Invalid header checksum [ 459.170504] Bluetooth: Invalid header checksum [ 459.280462] Bluetooth: Invalid header checksum [ 459.390495] Bluetooth: Invalid header checksum [ 459.500405] Bluetooth: Invalid header checksum [ 459.610516] Bluetooth: Invalid header checksum [ 459.720387] Bluetooth: Invalid header checksum [ 459.830611] Bluetooth: Invalid header checksum [ 459.940399] Bluetooth: Invalid header checksum [ 460.050509] Bluetooth: Invalid header checksum [ 460.160446] Bluetooth: Invalid header checksum [ 460.270479] Bluetooth: Invalid header checksum [ 460.380341] Bluetooth: Invalid header checksum [ 460.490448] Bluetooth: Invalid header checksum [ 460.600524] Bluetooth: Invalid header checksum [ 460.710369] Bluetooth: Invalid header checksum [ 460.820538] Bluetooth: Invalid header checksum [ 460.930467] Bluetooth: Invalid header checksum [ 461.040476] Bluetooth: Invalid header checksum [ 461.150489] Bluetooth: Invalid header checksum [ 461.260459] Bluetooth: Invalid header checksum [ 461.370510] Bluetooth: Invalid header checksum [ 461.480470] Bluetooth: Invalid header checksum [ 461.590516] Bluetooth: Invalid header checksum [ 461.700403] Bluetooth: Invalid header checksum [ 461.810519] Bluetooth: Invalid header checksum [ 461.920419] Bluetooth: Invalid header checksum [ 462.030487] Bluetooth: Invalid header checksum [ 462.140406] Bluetooth: Invalid header checksum [ 462.250399] Bluetooth: Invalid header checksum [ 462.360413] Bluetooth: Invalid header checksum [ 462.470436] Bluetooth: Invalid header checksum [ 462.580455] Bluetooth: Invalid header checksum [ 462.690500] Bluetooth: Invalid header checksum [ 462.800394] Bluetooth: Invalid header checksum [ 462.910478] Bluetooth: Invalid header checksum [ 463.020432] Bluetooth: Invalid header checksum [ 463.130549] Bluetooth: Invalid header checksum [ 463.240477] Bluetooth: Invalid header checksum [ 463.350466] Bluetooth: Invalid header checksum [ 463.460418] Bluetooth: Invalid header checksum [ 463.570492] Bluetooth: Invalid header checksum [ 463.680422] Bluetooth: Invalid header checksum [ 463.790456] Bluetooth: Invalid header checksum [ 463.900414] Bluetooth: Invalid header checksum [ 464.010515] Bluetooth: Invalid header checksum [ 464.120507] Bluetooth: Invalid header checksum [ 464.230477] Bluetooth: Invalid header checksum [ 464.340430] Bluetooth: Invalid header checksum [ 464.450555] Bluetooth: Invalid header checksum [ 464.560440] Bluetooth: Invalid header checksum [ 464.670521] Bluetooth: Invalid header checksum [ 464.780455] Bluetooth: Invalid header checksum [ 464.890500] Bluetooth: Invalid header checksum [ 465.000425] Bluetooth: Invalid header checksum [ 465.110470] Bluetooth: Invalid header checksum [ 465.220385] Bluetooth: Invalid header checksum [ 465.330400] Bluetooth: Invalid header checksum [ 465.440418] Bluetooth: Invalid header checksum [ 465.550371] Bluetooth: Invalid header checksum [ 465.660393] Bluetooth: Invalid header checksum [ 465.770523] Bluetooth: Invalid header checksum [ 465.880450] Bluetooth: Invalid header checksum [ 465.990454] Bluetooth: Invalid header checksum [ 466.100414] Bluetooth: Invalid header checksum [ 466.210512] Bluetooth: Invalid header checksum [ 466.320402] Bluetooth: Invalid header checksum [ 466.430459] Bluetooth: Invalid header checksum [ 466.540443] Bluetooth: Invalid header checksum [ 466.650669] Bluetooth: Invalid header checksum [ 466.760462] Bluetooth: Invalid header checksum [ 466.870408] Bluetooth: Invalid header checksum [ 466.980461] Bluetooth: Invalid header checksum [ 467.090358] Bluetooth: Invalid header checksum [ 467.200550] Bluetooth: Invalid header checksum [ 467.310422] Bluetooth: Invalid header checksum [ 467.420485] Bluetooth: Invalid header checksum [ 467.530437] Bluetooth: Invalid header checksum [ 467.640998] Bluetooth: Invalid header checksum [ 467.750483] Bluetooth: Invalid header checksum [ 467.860518] Bluetooth: Invalid header checksum [ 467.970350] Bluetooth: Invalid header checksum [ 468.080479] Bluetooth: Invalid header checksum [ 468.190415] Bluetooth: Invalid header checksum [ 468.300533] Bluetooth: Invalid header checksum [ 468.410437] Bluetooth: Invalid header checksum [ 468.520423] Bluetooth: Invalid header checksum [ 468.630446] Bluetooth: Invalid header checksum [ 468.740448] Bluetooth: Invalid header checksum [ 468.850442] Bluetooth: Invalid header checksum [ 468.970466] Bluetooth: Invalid header checksum [ 469.080490] Bluetooth: Invalid header checksum [ 469.190637] Bluetooth: Invalid header checksum [ 469.300492] Bluetooth: Invalid header checksum [ 469.410525] Bluetooth: Invalid header checksum [ 469.520440] Bluetooth: Invalid header checksum [ 469.630468] Bluetooth: Invalid header checksum [ 469.740434] Bluetooth: Invalid header checksum [ 469.850391] Bluetooth: Invalid header checksum [ 469.960451] Bluetooth: Invalid header checksum [ 470.070388] Bluetooth: Invalid header checksum [ 470.180439] Bluetooth: Invalid header checksum [ 470.290715] Bluetooth: Invalid header checksum [ 470.400456] Bluetooth: Invalid header checksum [ 470.510527] Bluetooth: Invalid header checksum [ 470.620464] Bluetooth: Invalid header checksum [ 470.730467] Bluetooth: Invalid header checksum [ 470.840514] Bluetooth: Invalid header checksum [ 470.950386] Bluetooth: Invalid header checksum [ 471.060453] Bluetooth: Invalid header checksum [ 471.171019] Bluetooth: Invalid header checksum [ 471.280485] Bluetooth: Invalid header checksum [ 471.390514] Bluetooth: Invalid header checksum [ 471.500460] Bluetooth: Invalid header checksum [ 471.610504] Bluetooth: Invalid header checksum [ 471.720480] Bluetooth: Invalid header checksum [ 471.830374] Bluetooth: Invalid header checksum [ 471.940465] Bluetooth: Invalid header checksum [ 472.050441] Bluetooth: Invalid header checksum [ 472.160465] Bluetooth: Invalid header checksum [ 472.270381] Bluetooth: Invalid header checksum [ 472.380442] Bluetooth: Invalid header checksum [ 472.490495] Bluetooth: Invalid header checksum [ 472.600433] Bluetooth: Invalid header checksum [ 472.710540] Bluetooth: Invalid header checksum [ 472.820424] Bluetooth: Invalid header checksum [ 472.930494] Bluetooth: Invalid header checksum [ 473.040378] Bluetooth: Invalid header checksum [ 473.150492] Bluetooth: Invalid header checksum [ 473.260361] Bluetooth: Invalid header checksum [ 473.370380] Bluetooth: Invalid header checksum [ 473.480385] Bluetooth: Invalid header checksum [ 473.590468] Bluetooth: Invalid header checksum [ 473.700431] Bluetooth: Invalid header checksum [ 473.810488] Bluetooth: Invalid header checksum [ 473.920403] Bluetooth: Invalid header checksum [ 474.030406] Bluetooth: Invalid header checksum [ 474.140395] Bluetooth: Invalid header checksum [ 474.250517] Bluetooth: Invalid header checksum [ 474.360407] Bluetooth: Invalid header checksum [ 474.470481] Bluetooth: Invalid header checksum [ 474.580417] Bluetooth: Invalid header checksum [ 474.690473] Bluetooth: Invalid header checksum [ 474.800479] Bluetooth: Invalid header checksum [ 474.910376] Bluetooth: Invalid header checksum [ 475.020396] Bluetooth: Invalid header checksum [ 475.130468] Bluetooth: Invalid header checksum [ 475.240458] Bluetooth: Invalid header checksum [ 475.350377] Bluetooth: Invalid header checksum [ 475.460435] Bluetooth: Invalid header checksum [ 475.570390] Bluetooth: Invalid header checksum [ 475.690366] Bluetooth: Invalid header checksum [ 475.800330] Bluetooth: Invalid header checksum [ 475.910705] Bluetooth: Invalid header checksum [ 476.020358] Bluetooth: Invalid header checksum [ 476.130324] Bluetooth: Invalid header checksum [ 476.240435] Bluetooth: Invalid header checksum [ 476.350451] Bluetooth: Invalid header checksum [ 476.460354] Bluetooth: Invalid header checksum [ 476.570518] Bluetooth: Invalid header checksum [ 476.680402] Bluetooth: Invalid header checksum [ 476.790355] Bluetooth: Invalid header checksum [ 476.900375] Bluetooth: Invalid header checksum [ 477.010380] Bluetooth: Invalid header checksum [ 477.120390] Bluetooth: Invalid header checksum [ 477.230590] Bluetooth: Invalid header checksum [ 477.340399] Bluetooth: Invalid header checksum [ 477.450471] Bluetooth: Invalid header checksum [ 477.560424] Bluetooth: Invalid header checksum [ 477.670960] Bluetooth: Invalid header checksum [ 477.780403] Bluetooth: Invalid header checksum [ 477.890495] Bluetooth: Invalid header checksum [ 478.000361] Bluetooth: Invalid header checksum [ 478.110515] Bluetooth: Invalid header checksum [ 478.220405] Bluetooth: Invalid header checksum [ 478.330450] Bluetooth: Invalid header checksum [ 478.440392] Bluetooth: Invalid header checksum [ 478.550596] Bluetooth: Invalid header checksum [ 478.660413] Bluetooth: Invalid header checksum [ 478.770518] Bluetooth: Invalid header checksum [ 478.880395] Bluetooth: Invalid header checksum [ 478.990549] Bluetooth: Invalid header checksum [ 479.100379] Bluetooth: Invalid header checksum [ 479.210412] Bluetooth: Invalid header checksum [ 479.320386] Bluetooth: Invalid header checksum [ 479.430470] Bluetooth: Invalid header checksum [ 479.540357] Bluetooth: Invalid header checksum [ 479.650356] Bluetooth: Invalid header checksum [ 479.760408] Bluetooth: Invalid header checksum [ 479.870387] Bluetooth: Invalid header checksum [ 479.980437] Bluetooth: Invalid header checksum [ 480.090363] Bluetooth: Invalid header checksum [ 480.200330] Bluetooth: Invalid header checksum [ 480.310417] Bluetooth: Invalid header checksum [ 480.420330] Bluetooth: Invalid header checksum [ 480.530454] Bluetooth: Invalid header checksum [ 480.640440] Bluetooth: Invalid header checksum [ 480.750446] Bluetooth: Invalid header checksum [ 480.860353] Bluetooth: Invalid header checksum [ 480.970353] Bluetooth: Invalid header checksum [ 481.080358] Bluetooth: Invalid header checksum [ 481.190353] Bluetooth: Invalid header checksum [ 481.300340] Bluetooth: Invalid header checksum [ 481.410483] Bluetooth: Invalid header checksum [ 481.520399] Bluetooth: Invalid header checksum [ 481.630430] Bluetooth: Invalid header checksum [ 481.740377] Bluetooth: Invalid header checksum [ 481.850374] Bluetooth: Invalid header checksum [ 481.960413] Bluetooth: Invalid header checksum [ 482.070523] Bluetooth: Invalid header checksum [ 482.180377] Bluetooth: Invalid header checksum [ 482.291115] Bluetooth: Invalid header checksum [ 482.400378] Bluetooth: Invalid header checksum [ 482.510349] Bluetooth: Invalid header checksum [ 482.620418] Bluetooth: Invalid header checksum [ 482.730367] Bluetooth: Invalid header checksum [ 482.840410] Bluetooth: Invalid header checksum [ 482.950410] Bluetooth: Invalid header checksum [ 483.060352] Bluetooth: Invalid header checksum [ 483.170442] Bluetooth: Invalid header checksum [ 483.280376] Bluetooth: Invalid header checksum [ 483.390352] Bluetooth: Invalid header checksum [ 483.500404] Bluetooth: Invalid header checksum [ 483.610416] Bluetooth: Invalid header checksum [ 483.720381] Bluetooth: Invalid header checksum [ 483.830408] Bluetooth: Invalid header checksum [ 483.940392] Bluetooth: Invalid header checksum [ 484.050440] Bluetooth: Invalid header checksum [ 484.160441] Bluetooth: Invalid header checksum [ 484.271083] Bluetooth: Invalid header checksum [ 484.380507] Bluetooth: Invalid header checksum [ 484.490465] Bluetooth: Invalid header checksum [ 484.600435] Bluetooth: Invalid header checksum [ 484.710392] Bluetooth: Invalid header checksum [ 484.820386] Bluetooth: Invalid header checksum [ 484.930338] Bluetooth: Invalid header checksum [ 485.050409] Bluetooth: Invalid header checksum [ 485.160544] Bluetooth: Invalid header checksum [ 485.270434] Bluetooth: Invalid header checksum [ 485.380436] Bluetooth: Invalid header checksum [ 485.490415] Bluetooth: Invalid header checksum [ 485.600436] Bluetooth: Invalid header checksum [ 485.710419] Bluetooth: Invalid header checksum [ 485.820626] Bluetooth: Invalid header checksum [ 485.930390] Bluetooth: Invalid header checksum [ 486.040447] Bluetooth: Invalid header checksum [ 486.150423] Bluetooth: Invalid header checksum [ 486.260341] Bluetooth: Invalid header checksum [ 486.370292] Bluetooth: Invalid header checksum [ 486.480332] Bluetooth: Invalid header checksum [ 486.590368] Bluetooth: Invalid header checksum [ 486.700464] Bluetooth: Invalid header checksum [ 486.810437] Bluetooth: Invalid header checksum [ 486.920344] Bluetooth: Invalid header checksum [ 487.030888] Bluetooth: Invalid header checksum [ 487.140390] Bluetooth: Invalid header checksum [ 487.250368] Bluetooth: Invalid header checksum [ 487.360392] Bluetooth: Invalid header checksum [ 487.470375] Bluetooth: Invalid header checksum [ 487.580683] Bluetooth: Invalid header checksum [ 487.690364] Bluetooth: Invalid header checksum [ 487.800306] Bluetooth: Invalid header checksum [ 487.910486] Bluetooth: Invalid header checksum [ 488.020456] Bluetooth: Invalid header checksum [ 488.130355] Bluetooth: Invalid header checksum [ 488.240246] Bluetooth: Invalid header checksum [ 488.350360] Bluetooth: Invalid header checksum [ 488.460404] Bluetooth: Invalid header checksum [ 488.570383] Bluetooth: Invalid header checksum [ 488.680441] Bluetooth: Invalid header checksum [ 488.790386] Bluetooth: Invalid header checksum [ 488.900946] Bluetooth: Invalid header checksum [ 489.010362] Bluetooth: Invalid header checksum [ 489.120329] Bluetooth: Invalid header checksum [ 489.230311] Bluetooth: Invalid header checksum [ 489.340386] Bluetooth: Invalid header checksum [ 489.450308] Bluetooth: Invalid header checksum [ 489.560341] Bluetooth: Invalid header checksum [ 489.670726] Bluetooth: Invalid header checksum [ 489.780355] Bluetooth: Invalid header checksum [ 489.890425] Bluetooth: Invalid header checksum [ 490.000457] Bluetooth: Invalid header checksum [ 490.110546] Bluetooth: Invalid header checksum [ 490.220348] Bluetooth: Invalid header checksum [ 490.330374] Bluetooth: Invalid header checksum [ 490.440387] Bluetooth: Invalid header checksum [ 490.550482] Bluetooth: Invalid header checksum [ 490.660344] Bluetooth: Invalid header checksum [ 490.770553] Bluetooth: Invalid header checksum [ 490.880472] Bluetooth: Invalid header checksum [ 490.990565] Bluetooth: Invalid header checksum [ 491.100471] Bluetooth: Invalid header checksum [ 491.210471] Bluetooth: Invalid header checksum [ 491.320467] Bluetooth: Invalid header checksum [ 491.430994] Bluetooth: Invalid header checksum [ 491.540339] Bluetooth: Invalid header checksum [ 491.650385] Bluetooth: Invalid header checksum [ 491.760566] Bluetooth: Invalid header checksum [ 491.870439] Bluetooth: Invalid header checksum [ 491.980513] Bluetooth: Invalid header checksum [ 492.090528] Bluetooth: Invalid header checksum [ 492.200406] Bluetooth: Invalid header checksum [ 492.310355] Bluetooth: Invalid header checksum [ 492.430363] Bluetooth: Invalid header checksum [ 492.540465] Bluetooth: Invalid header checksum [ 492.650411] Bluetooth: Invalid header checksum [ 492.760491] Bluetooth: Invalid header checksum [ 492.870416] Bluetooth: Invalid header checksum [ 492.980418] Bluetooth: Invalid header checksum [ 493.090375] Bluetooth: Invalid header checksum [ 493.200465] Bluetooth: Invalid header checksum [ 493.310338] Bluetooth: Invalid header checksum [ 493.420406] Bluetooth: Invalid header checksum [ 493.530346] Bluetooth: Invalid header checksum [ 493.640351] Bluetooth: Invalid header checksum [ 493.750578] Bluetooth: Invalid header checksum [ 493.860427] Bluetooth: Invalid header checksum [ 493.970343] Bluetooth: Invalid header checksum [ 494.090352] Bluetooth: Invalid header checksum [ 494.200637] Bluetooth: Invalid header checksum [ 494.310413] Bluetooth: Invalid header checksum [ 494.420338] Bluetooth: Invalid header checksum [ 494.530380] Bluetooth: Invalid header checksum [ 494.640475] Bluetooth: Invalid header checksum [ 494.750474] Bluetooth: Invalid header checksum [ 494.860665] Bluetooth: Invalid header checksum [ 494.973195] Bluetooth: Invalid header checksum [ 495.080553] Bluetooth: Invalid header checksum [ 495.190458] Bluetooth: Invalid header checksum [ 495.300911] Bluetooth: Invalid header checksum [ 495.410466] Bluetooth: Invalid header checksum [ 495.520432] Bluetooth: Invalid header checksum [ 495.630332] Bluetooth: Invalid header checksum [ 495.740422] Bluetooth: Invalid header checksum [ 495.850499] Bluetooth: Invalid header checksum [ 495.960367] Bluetooth: Invalid header checksum [ 496.070467] Bluetooth: Invalid header checksum [ 496.180348] Bluetooth: Invalid header checksum [ 496.290532] Bluetooth: Invalid header checksum [ 496.400405] Bluetooth: Invalid header checksum [ 496.510511] Bluetooth: Invalid header checksum [ 496.620469] Bluetooth: Invalid header checksum [ 496.730634] Bluetooth: Invalid header checksum [ 496.840411] Bluetooth: Invalid header checksum [ 496.950452] Bluetooth: Invalid header checksum [ 497.060416] Bluetooth: Invalid header checksum [ 497.170422] Bluetooth: Invalid header checksum [ 497.280334] Bluetooth: Invalid header checksum [ 497.390284] Bluetooth: Invalid header checksum [ 497.500357] Bluetooth: Invalid header checksum [ 497.610614] Bluetooth: Invalid header checksum [ 497.720367] Bluetooth: Invalid header checksum [ 497.830406] Bluetooth: Invalid header checksum [ 497.940351] Bluetooth: Invalid header checksum [ 498.050446] Bluetooth: Invalid header checksum [ 498.160488] Bluetooth: Invalid header checksum [ 498.270542] Bluetooth: Invalid header checksum [ 498.380411] Bluetooth: Invalid header checksum [ 498.490292] Bluetooth: Invalid header checksum [ 498.600376] Bluetooth: Invalid header checksum [ 498.710552] Bluetooth: Invalid header checksum [ 498.820377] Bluetooth: Invalid header checksum [ 498.930473] Bluetooth: Invalid header checksum [ 499.040462] Bluetooth: Invalid header checksum [ 499.150554] Bluetooth: Invalid header checksum [ 499.260427] Bluetooth: Invalid header checksum [ 499.370520] Bluetooth: Invalid header checksum [ 499.480425] Bluetooth: Invalid header checksum [ 499.590493] Bluetooth: Invalid header checksum [ 499.700478] Bluetooth: Invalid header checksum [ 499.810452] Bluetooth: Invalid header checksum [ 499.920424] Bluetooth: Invalid header checksum [ 500.030472] Bluetooth: Invalid header checksum [ 500.140563] Bluetooth: Invalid header checksum [ 500.250427] Bluetooth: Invalid header checksum [ 500.360526] Bluetooth: Invalid header checksum [ 500.470353] Bluetooth: Invalid header checksum [ 500.580499] Bluetooth: Invalid header checksum [ 500.690355] Bluetooth: Invalid header checksum [ 500.800436] Bluetooth: Invalid header checksum [ 500.910405] Bluetooth: Invalid header checksum [ 501.020454] Bluetooth: Invalid header checksum [ 501.130442] Bluetooth: Invalid header checksum [ 501.240607] Bluetooth: Invalid header checksum [ 501.350357] Bluetooth: Invalid header checksum [ 501.460520] Bluetooth: Invalid header checksum [ 501.570523] Bluetooth: Invalid header checksum [ 501.690447] Bluetooth: Invalid header checksum [ 501.800520] Bluetooth: Invalid header checksum [ 501.910461] Bluetooth: Invalid header checksum [ 502.020433] Bluetooth: Invalid header checksum [ 502.130370] Bluetooth: Invalid header checksum [ 502.240429] Bluetooth: Invalid header checksum [ 502.350371] Bluetooth: Invalid header checksum [ 502.460420] Bluetooth: Invalid header checksum [ 502.570427] Bluetooth: Invalid header checksum [ 502.681013] Bluetooth: Invalid header checksum [ 502.790412] Bluetooth: Invalid header checksum [ 502.900357] Bluetooth: Invalid header checksum [ 503.010406] Bluetooth: Invalid header checksum [ 503.120428] Bluetooth: Invalid header checksum [ 503.230334] Bluetooth: Invalid header checksum [ 503.340384] Bluetooth: Invalid header checksum [ 503.450464] Bluetooth: Invalid header checksum [ 503.560546] Bluetooth: Invalid header checksum [ 503.670385] Bluetooth: Invalid header checksum [ 503.780346] Bluetooth: Invalid header checksum [ 503.890423] Bluetooth: Invalid header checksum [ 504.000356] Bluetooth: Invalid header checksum [ 504.110447] Bluetooth: Invalid header checksum [ 504.221040] Bluetooth: Invalid header checksum [ 504.330427] Bluetooth: Invalid header checksum [ 504.440345] Bluetooth: Invalid header checksum [ 504.550465] Bluetooth: Invalid header checksum [ 504.660457] Bluetooth: Invalid header checksum [ 504.770371] Bluetooth: Invalid header checksum [ 504.880561] Bluetooth: Invalid header checksum [ 504.990443] Bluetooth: Invalid header checksum [ 505.100352] Bluetooth: Invalid header checksum [ 505.210448] Bluetooth: Invalid header checksum [ 505.320415] Bluetooth: Invalid header checksum [ 505.430415] Bluetooth: Invalid header checksum [ 505.540470] Bluetooth: Invalid header checksum [ 505.650477] Bluetooth: Invalid header checksum [ 505.760450] Bluetooth: Invalid header checksum [ 505.880735] Bluetooth: Invalid header checksum [ 505.990340] Bluetooth: Invalid header checksum [ 506.100365] Bluetooth: Invalid header checksum [ 506.210406] Bluetooth: Invalid header checksum [ 506.320412] Bluetooth: Invalid header checksum [ 506.430429] Bluetooth: Invalid header checksum [ 506.540418] Bluetooth: Invalid header checksum [ 506.650358] Bluetooth: Invalid header checksum [ 506.760496] Bluetooth: Invalid header checksum [ 506.870351] Bluetooth: Invalid header checksum [ 506.980372] Bluetooth: Invalid header checksum [ 507.090426] Bluetooth: Invalid header checksum [ 507.200709] Bluetooth: Invalid header checksum [ 507.310407] Bluetooth: Invalid header checksum [ 507.420731] Bluetooth: Invalid header checksum [ 507.530441] Bluetooth: Invalid header checksum [ 507.640551] Bluetooth: Invalid header checksum [ 507.750450] Bluetooth: Invalid header checksum [ 507.860437] Bluetooth: Invalid header checksum [ 507.970459] Bluetooth: Invalid header checksum [ 508.090429] Bluetooth: Invalid header checksum [ 508.200551] Bluetooth: Invalid header checksum [ 508.310430] Bluetooth: Invalid header checksum [ 508.420341] Bluetooth: Invalid header checksum [ 508.530444] Bluetooth: Invalid header checksum [ 508.640985] Bluetooth: Invalid header checksum [ 508.750442] Bluetooth: Invalid header checksum [ 508.860530] Bluetooth: Invalid header checksum [ 508.970427] Bluetooth: Invalid header checksum [ 509.080435] Bluetooth: Invalid header checksum [ 509.190549] Bluetooth: Invalid header checksum [ 509.300638] Bluetooth: Invalid header checksum [ 509.410438] Bluetooth: Invalid header checksum [ 509.520489] Bluetooth: Invalid header checksum [ 509.630421] Bluetooth: Invalid header checksum [ 509.740434] Bluetooth: Invalid header checksum [ 509.850441] Bluetooth: Invalid header checksum [ 509.960542] Bluetooth: Invalid header checksum [ 510.070399] Bluetooth: Invalid header checksum [ 510.180722] Bluetooth: Invalid header checksum [ 510.290428] Bluetooth: Invalid header checksum [ 510.400421] Bluetooth: Invalid header checksum [ 510.510441] Bluetooth: Invalid header checksum [ 510.620553] Bluetooth: Invalid header checksum [ 510.730415] Bluetooth: Invalid header checksum [ 510.840470] Bluetooth: Invalid header checksum [ 510.950656] Bluetooth: Invalid header checksum [ 511.060362] Bluetooth: Invalid header checksum [ 511.170482] Bluetooth: Invalid header checksum [ 511.290450] Bluetooth: Invalid header checksum [ 511.400734] Bluetooth: Invalid header checksum [ 511.510833] Bluetooth: Invalid header checksum [ 511.620504] Bluetooth: Invalid header checksum [ 511.730416] Bluetooth: Invalid header checksum [ 511.840484] Bluetooth: Invalid header checksum [ 511.950453] Bluetooth: Invalid header checksum [ 512.060472] Bluetooth: Invalid header checksum [ 512.170443] Bluetooth: Invalid header checksum [ 512.280559] Bluetooth: Invalid header checksum [ 512.390443] Bluetooth: Invalid header checksum [ 512.500458] Bluetooth: Invalid header checksum [ 512.610446] Bluetooth: Invalid header checksum [ 512.720482] Bluetooth: Invalid header checksum [ 512.830443] Bluetooth: Invalid header checksum [ 512.940362] Bluetooth: Invalid header checksum [ 513.050468] Bluetooth: Invalid header checksum [ 513.160584] Bluetooth: Invalid header checksum [ 513.270560] Bluetooth: Invalid header checksum [ 513.380368] Bluetooth: Invalid header checksum [ 513.490449] Bluetooth: Invalid header checksum [ 513.600528] Bluetooth: Invalid header checksum [ 513.710467] Bluetooth: Invalid header checksum [ 513.820540] Bluetooth: Invalid header checksum [ 513.930448] Bluetooth: Invalid header checksum [ 514.040528] Bluetooth: Invalid header checksum [ 514.150374] Bluetooth: Invalid header checksum [ 514.260485] Bluetooth: Invalid header checksum [ 514.370343] Bluetooth: Invalid header checksum [ 514.480366] Bluetooth: Invalid header checksum [ 514.590421] Bluetooth: Invalid header checksum [ 514.700373] Bluetooth: Invalid header checksum [ 514.810463] Bluetooth: Invalid header checksum [ 514.920376] Bluetooth: Invalid header checksum [ 515.030961] Bluetooth: Invalid header checksum [ 515.140545] Bluetooth: Invalid header checksum [ 515.250433] Bluetooth: Invalid header checksum [ 515.360353] Bluetooth: Invalid header checksum [ 515.470452] Bluetooth: Invalid header checksum [ 515.580400] Bluetooth: Invalid header checksum [ 515.690335] Bluetooth: Invalid header checksum [ 515.800339] Bluetooth: Invalid header checksum [ 515.910367] Bluetooth: Invalid header checksum [ 516.020344] Bluetooth: Invalid header checksum [ 516.130419] Bluetooth: Invalid header checksum [ 516.240435] Bluetooth: Invalid header checksum [ 516.350485] Bluetooth: Invalid header checksum [ 516.460408] Bluetooth: Invalid header checksum [ 516.570434] Bluetooth: Invalid header checksum [ 516.680358] Bluetooth: Invalid header checksum [ 516.790621] Bluetooth: Invalid header checksum [ 516.900629] Bluetooth: Invalid header checksum [ 517.010441] Bluetooth: Invalid header checksum [ 517.120456] Bluetooth: Invalid header checksum [ 517.230437] Bluetooth: Invalid header checksum [ 517.340395] Bluetooth: Invalid header checksum [ 517.450448] Bluetooth: Invalid header checksum [ 517.560485] Bluetooth: Invalid header checksum [ 517.670402] Bluetooth: Invalid header checksum [ 517.780567] Bluetooth: Invalid header checksum [ 517.890446] Bluetooth: Invalid header checksum [ 518.000444] Bluetooth: Invalid header checksum [ 518.110455] Bluetooth: Invalid header checksum [ 518.220367] Bluetooth: Invalid header checksum [ 518.330445] Bluetooth: Invalid header checksum [ 518.440363] Bluetooth: Invalid header checksum [ 518.550477] Bluetooth: Invalid header checksum [ 518.660470] Bluetooth: Invalid header checksum [ 518.770463] Bluetooth: Invalid header checksum [ 518.880570] Bluetooth: Invalid header checksum [ 518.990455] Bluetooth: Invalid header checksum [ 519.100476] Bluetooth: Invalid header checksum [ 519.210483] Bluetooth: Invalid header checksum [ 519.320359] Bluetooth: Invalid header checksum [ 519.430410] Bluetooth: Invalid header checksum [ 519.540460] Bluetooth: Invalid header checksum [ 519.660719] Bluetooth: Invalid header checksum [ 519.770345] Bluetooth: Invalid header checksum [ 519.880363] Bluetooth: Invalid header checksum [ 519.990459] Bluetooth: Invalid header checksum [ 520.100697] Bluetooth: Invalid header checksum [ 520.210465] Bluetooth: Invalid header checksum [ 520.320401] Bluetooth: Invalid header checksum [ 520.430689] Bluetooth: Invalid header checksum [ 520.540480] Bluetooth: Invalid header checksum [ 520.650475] Bluetooth: Invalid header checksum [ 520.760458] Bluetooth: Invalid header checksum [ 520.870462] Bluetooth: Invalid header checksum [ 520.980481] Bluetooth: Invalid header checksum [ 521.090359] Bluetooth: Invalid header checksum [ 521.210498] Bluetooth: Invalid header checksum [ 521.320533] Bluetooth: Invalid header checksum [ 521.430369] Bluetooth: Invalid header checksum [ 521.540487] Bluetooth: Invalid header checksum [ 521.650440] Bluetooth: Invalid header checksum [ 521.760454] Bluetooth: Invalid header checksum [ 521.870372] Bluetooth: Invalid header checksum [ 521.980348] Bluetooth: Invalid header checksum [ 522.090477] Bluetooth: Invalid header checksum [ 522.200521] Bluetooth: Invalid header checksum [ 522.310438] Bluetooth: Invalid header checksum [ 522.420545] Bluetooth: Invalid header checksum [ 522.530444] Bluetooth: Invalid header checksum [ 522.640473] Bluetooth: Invalid header checksum [ 522.750437] Bluetooth: Invalid header checksum [ 522.860538] Bluetooth: Invalid header checksum [ 522.970488] Bluetooth: Invalid header checksum [ 523.080468] Bluetooth: Invalid header checksum [ 523.190371] Bluetooth: Invalid header checksum [ 523.300374] Bluetooth: Invalid header checksum [ 523.410460] Bluetooth: Invalid header checksum [ 523.530426] Bluetooth: Invalid header checksum [ 523.640583] Bluetooth: Invalid header checksum [ 523.750561] Bluetooth: Invalid header checksum [ 523.860519] Bluetooth: Invalid header checksum [ 523.970486] Bluetooth: Invalid header checksum [ 524.080552] Bluetooth: Invalid header checksum [ 524.190483] Bluetooth: Invalid header checksum [ 524.300547] Bluetooth: Invalid header checksum [ 524.410455] Bluetooth: Invalid header checksum [ 524.520664] Bluetooth: Invalid header checksum [ 524.630431] Bluetooth: Invalid header checksum [ 524.740563] Bluetooth: Invalid header checksum [ 524.850424] Bluetooth: Invalid header checksum [ 524.960611] Bluetooth: Invalid header checksum [ 525.070511] Bluetooth: Invalid header checksum [ 525.180576] Bluetooth: Invalid header checksum [ 525.290515] Bluetooth: Invalid header checksum [ 525.400388] Bluetooth: Invalid header checksum [ 525.510524] Bluetooth: Invalid header checksum [ 525.620547] Bluetooth: Invalid header checksum [ 525.730439] Bluetooth: Invalid header checksum [ 525.850354] Bluetooth: Invalid header checksum [ 525.960357] Bluetooth: Invalid header checksum [ 526.070425] Bluetooth: Invalid header checksum [ 526.180366] Bluetooth: Invalid header checksum [ 526.290485] Bluetooth: Invalid header checksum [ 526.400653] Bluetooth: Invalid header checksum [ 526.510476] Bluetooth: Invalid header checksum [ 526.620517] Bluetooth: Invalid header checksum [ 526.730465] Bluetooth: Invalid header checksum [ 526.840566] Bluetooth: Invalid header checksum [ 526.950456] Bluetooth: Invalid header checksum [ 527.060424] Bluetooth: Invalid header checksum [ 527.170448] Bluetooth: Invalid header checksum [ 527.280420] Bluetooth: Invalid header checksum [ 527.390450] Bluetooth: Invalid header checksum [ 527.500363] Bluetooth: Invalid header checksum [ 527.610464] Bluetooth: Invalid header checksum [ 527.720682] Bluetooth: Invalid header checksum [ 527.830502] Bluetooth: Invalid header checksum [ 527.940355] Bluetooth: Invalid header checksum [ 528.050459] Bluetooth: Invalid header checksum [ 528.160376] Bluetooth: Invalid header checksum [ 528.270447] Bluetooth: Invalid header checksum [ 528.380607] Bluetooth: Invalid header checksum [ 528.490467] Bluetooth: Invalid header checksum [ 528.600402] Bluetooth: Invalid header checksum [ 528.710518] Bluetooth: Invalid header checksum [ 528.820472] Bluetooth: Invalid header checksum [ 528.930444] Bluetooth: Invalid header checksum [ 529.040567] Bluetooth: Invalid header checksum [ 529.150483] Bluetooth: Invalid header checksum [ 529.260483] Bluetooth: Invalid header checksum [ 529.370449] Bluetooth: Invalid header checksum [ 529.480374] Bluetooth: Invalid header checksum [ 529.590483] Bluetooth: Invalid header checksum [ 529.700656] Bluetooth: Invalid header checksum [ 529.810694] Bluetooth: Invalid header checksum [ 529.920639] Bluetooth: Invalid header checksum [ 530.030665] Bluetooth: Invalid header checksum [ 530.140631] Bluetooth: Invalid header checksum [ 530.250497] Bluetooth: Invalid header checksum [ 530.360538] Bluetooth: Invalid header checksum [ 530.470473] Bluetooth: Invalid header checksum [ 530.580750] Bluetooth: Invalid header checksum [ 530.690493] Bluetooth: Invalid header checksum [ 530.800566] Bluetooth: Invalid header checksum [ 530.910564] Bluetooth: Invalid header checksum [ 531.020532] Bluetooth: Invalid header checksum [ 531.130517] Bluetooth: Invalid header checksum [ 531.240547] Bluetooth: Invalid header checksum [ 531.360856] Bluetooth: Invalid header checksum [ 531.470458] Bluetooth: Invalid header checksum [ 531.580386] Bluetooth: Invalid header checksum [ 531.690447] Bluetooth: Invalid header checksum [ 531.800612] Bluetooth: Invalid header checksum [ 531.910522] Bluetooth: Invalid header checksum [ 532.020699] Bluetooth: Invalid header checksum [ 532.130526] Bluetooth: Invalid header checksum [ 532.240535] Bluetooth: Invalid header checksum [ 532.350451] Bluetooth: Invalid header checksum [ 532.460561] Bluetooth: Invalid header checksum [ 532.570461] Bluetooth: Invalid header checksum [ 532.680601] Bluetooth: Invalid header checksum [ 532.790443] Bluetooth: Invalid header checksum [ 532.900568] Bluetooth: Invalid header checksum [ 533.010501] Bluetooth: Invalid header checksum [ 533.120528] Bluetooth: Invalid header checksum [ 533.230515] Bluetooth: Invalid header checksum [ 533.340509] Bluetooth: Invalid header checksum [ 533.450545] Bluetooth: Invalid header checksum [ 533.560533] Bluetooth: Invalid header checksum [ 533.678779] Bluetooth: Invalid header checksum [ 533.780587] Bluetooth: Invalid header checksum [ 533.890588] Bluetooth: Invalid header checksum [ 534.000405] Bluetooth: Invalid header checksum [ 534.110399] Bluetooth: Invalid header checksum [ 534.220467] Bluetooth: Invalid header checksum [ 534.330453] Bluetooth: Invalid header checksum [ 534.440411] Bluetooth: Invalid header checksum [ 534.550385] Bluetooth: Invalid header checksum [ 534.660512] Bluetooth: Invalid header checksum [ 534.770565] Bluetooth: Invalid header checksum [ 534.880495] Bluetooth: Invalid header checksum [ 534.990385] Bluetooth: Invalid header checksum [ 535.100360] Bluetooth: Invalid header checksum [ 535.210376] Bluetooth: Invalid header checksum [ 535.320361] Bluetooth: Invalid header checksum [ 535.430411] Bluetooth: Invalid header checksum [ 535.540386] Bluetooth: Invalid header checksum [ 535.650419] Bluetooth: Invalid header checksum [ 535.760330] Bluetooth: Invalid header checksum [ 535.870399] Bluetooth: Invalid header checksum [ 535.980408] Bluetooth: Invalid header checksum [ 536.090383] Bluetooth: Invalid header checksum [ 536.200441] Bluetooth: Invalid header checksum [ 536.310385] Bluetooth: Invalid header checksum [ 536.420405] Bluetooth: Invalid header checksum [ 536.530401] Bluetooth: Invalid header checksum [ 536.640394] Bluetooth: Invalid header checksum [ 536.750417] Bluetooth: Invalid header checksum [ 536.860440] Bluetooth: Invalid header checksum [ 536.970341] Bluetooth: Invalid header checksum [ 537.080349] Bluetooth: Invalid header checksum [ 537.190422] Bluetooth: Invalid header checksum [ 537.300350] Bluetooth: Invalid header checksum [ 537.410480] Bluetooth: Invalid header checksum [ 537.520360] Bluetooth: Invalid header checksum [ 537.630446] Bluetooth: Invalid header checksum [ 537.740371] Bluetooth: Invalid header checksum [ 537.850470] Bluetooth: Invalid header checksum [ 537.960341] Bluetooth: Invalid header checksum [ 538.070379] Bluetooth: Invalid header checksum [ 538.180238] Bluetooth: Invalid header checksum [ 538.290334] Bluetooth: Invalid header checksum [ 538.400418] Bluetooth: Invalid header checksum [ 538.510426] Bluetooth: Invalid header checksum [ 538.620417] Bluetooth: Invalid header checksum [ 538.730392] Bluetooth: Invalid header checksum [ 538.840374] Bluetooth: Invalid header checksum [ 538.950437] Bluetooth: Invalid header checksum [ 539.060422] Bluetooth: Invalid header checksum [ 539.170443] Bluetooth: Invalid header checksum [ 539.280287] Bluetooth: Invalid header checksum [ 539.390412] Bluetooth: Invalid header checksum [ 539.500333] Bluetooth: Invalid header checksum [ 539.610407] Bluetooth: Invalid header checksum [ 539.720409] Bluetooth: Invalid header checksum [ 539.830356] Bluetooth: Invalid header checksum [ 539.940438] Bluetooth: Invalid header checksum [ 540.050426] Bluetooth: Invalid header checksum [ 540.160388] Bluetooth: Invalid header checksum [ 540.270304] Bluetooth: Invalid header checksum [ 540.380409] Bluetooth: Invalid header checksum [ 540.490404] Bluetooth: Invalid header checksum [ 540.600430] Bluetooth: Invalid header checksum [ 540.710399] Bluetooth: Invalid header checksum [ 540.820525] Bluetooth: Invalid header checksum [ 540.930434] Bluetooth: Invalid header checksum [ 541.040645] Bluetooth: Invalid header checksum [ 541.150479] Bluetooth: Invalid header checksum [ 541.260432] Bluetooth: Invalid header checksum [ 541.370391] Bluetooth: Invalid header checksum [ 541.480442] Bluetooth: Invalid header checksum [ 541.590398] Bluetooth: Invalid header checksum [ 541.700468] Bluetooth: Invalid header checksum [ 541.810367] Bluetooth: Invalid header checksum [ 541.920456] Bluetooth: Invalid header checksum [ 542.030366] Bluetooth: Invalid header checksum [ 542.140445] Bluetooth: Invalid header checksum [ 542.250387] Bluetooth: Invalid header checksum [ 542.360236] Bluetooth: Invalid header checksum [ 542.470504] Bluetooth: Invalid header checksum [ 542.580460] Bluetooth: Invalid header checksum [ 542.690359] Bluetooth: Invalid header checksum [ 542.800451] Bluetooth: Invalid header checksum [ 542.910384] Bluetooth: Invalid header checksum [ 543.020447] Bluetooth: Invalid header checksum [ 543.130407] Bluetooth: Invalid header checksum [ 543.240370] Bluetooth: Invalid header checksum [ 543.350267] Bluetooth: Invalid header checksum [ 543.460488] Bluetooth: Invalid header checksum [ 543.570422] Bluetooth: Invalid header checksum [ 543.680433] Bluetooth: Invalid header checksum [ 543.790348] Bluetooth: Invalid header checksum [ 543.900357] Bluetooth: Invalid header checksum [ 544.022799] Bluetooth: Invalid header checksum [ 544.130396] Bluetooth: Invalid header checksum [ 544.240315] Bluetooth: Invalid header checksum [ 544.350648] Bluetooth: Invalid header checksum [ 544.460638] Bluetooth: Invalid header checksum [ 544.570420] Bluetooth: Invalid header checksum [ 544.680442] Bluetooth: Invalid header checksum [ 544.790409] Bluetooth: Invalid header checksum [ 544.900443] Bluetooth: Invalid header checksum [ 545.010463] Bluetooth: Invalid header checksum [ 545.120419] Bluetooth: Invalid header checksum [ 545.230648] Bluetooth: Invalid header checksum [ 545.340454] Bluetooth: Invalid header checksum [ 545.450342] Bluetooth: Invalid header checksum [ 545.560432] Bluetooth: Invalid header checksum [ 545.670369] Bluetooth: Invalid header checksum [ 545.780453] Bluetooth: Invalid header checksum [ 545.890423] Bluetooth: Invalid header checksum [ 546.000345] Bluetooth: Invalid header checksum [ 546.110412] Bluetooth: Invalid header checksum [ 546.230422] Bluetooth: Invalid header checksum [ 546.340334] Bluetooth: Invalid header checksum [ 546.450471] Bluetooth: Invalid header checksum [ 546.560441] Bluetooth: Invalid header checksum [ 546.670478] Bluetooth: Invalid header checksum [ 546.780440] Bluetooth: Invalid header checksum [ 546.890417] Bluetooth: Invalid header checksum [ 547.000543] Bluetooth: Invalid header checksum [ 547.110643] Bluetooth: Invalid header checksum [ 547.220385] Bluetooth: Invalid header checksum [ 547.330472] Bluetooth: Invalid header checksum [ 547.440367] Bluetooth: Invalid header checksum [ 547.550446] Bluetooth: Invalid header checksum [ 547.660655] Bluetooth: Invalid header checksum [ 547.770420] Bluetooth: Invalid header checksum [ 547.880525] Bluetooth: Invalid header checksum [ 547.990477] Bluetooth: Invalid header checksum [ 548.100525] Bluetooth: Invalid header checksum [ 548.210469] Bluetooth: Invalid header checksum [ 548.320466] Bluetooth: Invalid header checksum [ 548.430413] Bluetooth: Invalid header checksum [ 548.540430] Bluetooth: Invalid header checksum [ 548.650413] Bluetooth: Invalid header checksum [ 548.760442] Bluetooth: Invalid header checksum [ 548.870339] Bluetooth: Invalid header checksum [ 548.980449] Bluetooth: Invalid header checksum [ 549.090380] Bluetooth: Invalid header checksum [ 549.200565] Bluetooth: Invalid header checksum [ 549.310341] Bluetooth: Invalid header checksum [ 549.420367] Bluetooth: Invalid header checksum [ 549.530446] Bluetooth: Invalid header checksum [ 549.640556] Bluetooth: Invalid header checksum [ 549.750433] Bluetooth: Invalid header checksum [ 549.860276] Bluetooth: Invalid header checksum [ 549.970438] Bluetooth: Invalid header checksum [ 550.090415] Bluetooth: Invalid header checksum [ 550.200399] Bluetooth: Invalid header checksum [ 550.310649] Bluetooth: Invalid header checksum [ 550.420359] Bluetooth: Invalid header checksum [ 550.530430] Bluetooth: Invalid header checksum [ 550.640423] Bluetooth: Invalid header checksum [ 550.750446] Bluetooth: Invalid header checksum [ 550.860445] Bluetooth: Invalid header checksum [ 550.970337] Bluetooth: Invalid header checksum [ 551.080359] Bluetooth: Invalid header checksum [ 551.190435] Bluetooth: Invalid header checksum [ 551.300491] Bluetooth: Invalid header checksum [ 551.410440] Bluetooth: Invalid header checksum [ 551.520415] Bluetooth: Invalid header checksum [ 551.630298] Bluetooth: Invalid header checksum [ 551.740436] Bluetooth: Invalid header checksum [ 551.850370] Bluetooth: Invalid header checksum [ 551.960396] Bluetooth: Invalid header checksum [ 552.071650] Bluetooth: Invalid header checksum [ 552.180665] Bluetooth: Invalid header checksum [ 552.290370] Bluetooth: Invalid header checksum [ 552.400414] Bluetooth: Invalid header checksum [ 552.510419] Bluetooth: Invalid header checksum [ 552.620495] Bluetooth: Invalid header checksum [ 552.730406] Bluetooth: Invalid header checksum [ 552.840496] Bluetooth: Invalid header checksum [ 552.950396] Bluetooth: Invalid header checksum [ 553.060379] Bluetooth: Invalid header checksum [ 553.170420] Bluetooth: Invalid header checksum [ 553.280520] Bluetooth: Invalid header checksum [ 553.390444] Bluetooth: Invalid header checksum [ 553.500377] Bluetooth: Invalid header checksum [ 553.610425] Bluetooth: Invalid header checksum [ 553.720358] Bluetooth: Invalid header checksum [ 553.830432] Bluetooth: Invalid header checksum [ 553.940332] Bluetooth: Invalid header checksum [ 554.050419] Bluetooth: Invalid header checksum [ 554.160691] Bluetooth: Invalid header checksum [ 554.270432] Bluetooth: Invalid header checksum [ 554.380328] Bluetooth: Invalid header checksum [ 554.490412] Bluetooth: Invalid header checksum [ 554.600433] Bluetooth: Invalid header checksum [ 554.710606] Bluetooth: Invalid header checksum [ 554.823091] Bluetooth: Invalid header checksum [ 554.930407] Bluetooth: Invalid header checksum [ 555.040531] Bluetooth: Invalid header checksum [ 555.150390] Bluetooth: Invalid header checksum [ 555.260415] Bluetooth: Invalid header checksum [ 555.370331] Bluetooth: Invalid header checksum [ 555.480514] Bluetooth: Invalid header checksum [ 555.590414] Bluetooth: Invalid header checksum [ 555.700520] Bluetooth: Invalid header checksum [ 555.810404] Bluetooth: Invalid header checksum [ 555.920395] Bluetooth: Invalid header checksum [ 556.030269] Bluetooth: Invalid header checksum [ 556.140404] Bluetooth: Invalid header checksum [ 556.250382] Bluetooth: Invalid header checksum [ 556.360430] Bluetooth: Invalid header checksum [ 556.470380] Bluetooth: Invalid header checksum [ 556.580627] Bluetooth: Invalid header checksum [ 556.690388] Bluetooth: Invalid header checksum [ 556.800425] Bluetooth: Invalid header checksum [ 556.910408] Bluetooth: Invalid header checksum [ 557.020538] Bluetooth: Invalid header checksum [ 557.130377] Bluetooth: Invalid header checksum [ 557.240575] Bluetooth: Invalid header checksum [ 557.350353] Bluetooth: Invalid header checksum [ 557.460452] Bluetooth: Invalid header checksum [ 557.570402] Bluetooth: Invalid header checksum [ 557.681015] Bluetooth: Invalid header checksum [ 557.790387] Bluetooth: Invalid header checksum [ 557.900473] Bluetooth: Invalid header checksum [ 558.010500] Bluetooth: Invalid header checksum [ 558.120503] Bluetooth: Invalid header checksum [ 558.230493] Bluetooth: Invalid header checksum [ 558.340496] Bluetooth: Invalid header checksum [ 558.450479] Bluetooth: Invalid header checksum [ 558.560373] Bluetooth: Invalid header checksum [ 558.670484] Bluetooth: Invalid header checksum [ 558.780538] Bluetooth: Invalid header checksum [ 558.890404] Bluetooth: Invalid header checksum [ 559.000461] Bluetooth: Invalid header checksum [ 559.110441] Bluetooth: Invalid header checksum [ 559.220655] Bluetooth: Invalid header checksum [ 559.330418] Bluetooth: Invalid header checksum [ 559.440464] Bluetooth: Invalid header checksum [ 559.550511] Bluetooth: Invalid header checksum [ 559.660490] Bluetooth: Invalid header checksum [ 559.770375] Bluetooth: Invalid header checksum [ 559.880471] Bluetooth: Invalid header checksum [ 559.990336] Bluetooth: Invalid header checksum [ 560.100651] Bluetooth: Invalid header checksum [ 560.210463] Bluetooth: Invalid header checksum [ 560.320707] Bluetooth: Invalid header checksum [ 560.430455] Bluetooth: Invalid header checksum [ 560.540563] Bluetooth: Invalid header checksum [ 560.650511] Bluetooth: Invalid header checksum [ 560.760352] Bluetooth: Invalid header checksum [ 560.870432] Bluetooth: Invalid header checksum [ 560.980574] Bluetooth: Invalid header checksum [ 561.090448] Bluetooth: Invalid header checksum [ 561.210488] Bluetooth: Invalid header checksum [ 561.320532] Bluetooth: Invalid header checksum [ 561.430343] Bluetooth: Invalid header checksum [ 561.540379] Bluetooth: Invalid header checksum [ 561.650415] Bluetooth: Invalid header checksum [ 561.760484] Bluetooth: Invalid header checksum [ 561.870376] Bluetooth: Invalid header checksum [ 561.980516] Bluetooth: Invalid header checksum [ 562.090377] Bluetooth: Invalid header checksum [ 562.200487] Bluetooth: Invalid header checksum [ 562.310421] Bluetooth: Invalid header checksum [ 562.420474] Bluetooth: Invalid header checksum [ 562.530360] Bluetooth: Invalid header checksum [ 562.640338] Bluetooth: Invalid header checksum [ 562.750386] Bluetooth: Invalid header checksum [ 562.860512] Bluetooth: Invalid header checksum [ 562.970503] Bluetooth: Invalid header checksum [ 563.080380] Bluetooth: Invalid header checksum [ 563.190535] Bluetooth: Invalid header checksum [ 563.300346] Bluetooth: Invalid header checksum [ 563.410415] Bluetooth: Invalid header checksum [ 563.520339] Bluetooth: Invalid header checksum [ 563.630498] Bluetooth: Invalid header checksum [ 563.740366] Bluetooth: Invalid header checksum [ 563.850470] Bluetooth: Invalid header checksum [ 563.960550] Bluetooth: Invalid header checksum [ 564.070594] Bluetooth: Invalid header checksum [ 564.180528] Bluetooth: Invalid header checksum [ 564.290466] Bluetooth: Invalid header checksum [ 564.400638] Bluetooth: Invalid header checksum [ 564.510475] Bluetooth: Invalid header checksum [ 564.620454] Bluetooth: Invalid header checksum [ 564.730486] Bluetooth: Invalid header checksum [ 564.840699] Bluetooth: Invalid header checksum [ 564.950491] Bluetooth: Invalid header checksum [ 565.060548] Bluetooth: Invalid header checksum [ 565.170434] Bluetooth: Invalid header checksum [ 565.280444] Bluetooth: Invalid header checksum [ 565.390332] Bluetooth: Invalid header checksum [ 565.500462] Bluetooth: Invalid header checksum [ 565.610505] Bluetooth: Invalid header checksum [ 565.720377] Bluetooth: Invalid header checksum [ 565.830437] Bluetooth: Invalid header checksum [ 565.940412] Bluetooth: Invalid header checksum [ 566.050326] Bluetooth: Invalid header checksum [ 566.160371] Bluetooth: Invalid header checksum [ 566.270465] Bluetooth: Invalid header checksum [ 566.380286] Bluetooth: Invalid header checksum [ 566.490511] Bluetooth: Invalid header checksum [ 566.600494] Bluetooth: Invalid header checksum [ 566.710428] Bluetooth: Invalid header checksum [ 566.820415] Bluetooth: Invalid header checksum [ 566.930522] Bluetooth: Invalid header checksum [ 567.040358] Bluetooth: Invalid header checksum [ 567.150484] Bluetooth: Invalid header checksum [ 567.260364] Bluetooth: Invalid header checksum [ 567.370670] Bluetooth: Invalid header checksum [ 567.480536] Bluetooth: Invalid header checksum [ 567.590559] Bluetooth: Invalid header checksum [ 567.700362] Bluetooth: Invalid header checksum [ 567.810435] Bluetooth: Invalid header checksum [ 567.920354] Bluetooth: Invalid header checksum [ 568.030349] Bluetooth: Invalid header checksum [ 568.140449] Bluetooth: Invalid header checksum [ 568.250605] Bluetooth: Invalid header checksum [ 568.360477] Bluetooth: Invalid header checksum [ 568.470389] Bluetooth: Invalid header checksum [ 568.580451] Bluetooth: Invalid header checksum [ 568.690565] Bluetooth: Invalid header checksum [ 568.800475] Bluetooth: Invalid header checksum [ 568.910486] Bluetooth: Invalid header checksum [ 569.020516] Bluetooth: Invalid header checksum [ 569.131003] Bluetooth: Invalid header checksum [ 569.240436] Bluetooth: Invalid header checksum [ 569.350477] Bluetooth: Invalid header checksum [ 569.460423] Bluetooth: Invalid header checksum [ 569.570325] Bluetooth: Invalid header checksum [ 569.680374] Bluetooth: Invalid header checksum [ 569.790564] Bluetooth: Invalid header checksum [ 569.900473] Bluetooth: Invalid header checksum [ 570.010478] Bluetooth: Invalid header checksum [ 570.120458] Bluetooth: Invalid header checksum [ 570.230498] Bluetooth: Invalid header checksum [ 570.340453] Bluetooth: Invalid header checksum [ 570.450463] Bluetooth: Invalid header checksum [ 570.560464] Bluetooth: Invalid header checksum [ 570.670464] Bluetooth: Invalid header checksum [ 570.780458] Bluetooth: Invalid header checksum [ 570.890787] Bluetooth: Invalid header checksum [ 571.000445] Bluetooth: Invalid header checksum [ 571.110452] Bluetooth: Invalid header checksum [ 571.220349] Bluetooth: Invalid header checksum [ 571.330416] Bluetooth: Invalid header checksum [ 571.350352] INFO: task syz-executor.1:7049 blocked for more than 140 seconds. [ 571.357861] Not tainted 4.14.114 #4 [ 571.362668] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.370771] syz-executor.1 D24992 7049 1 0x00000004 [ 571.376492] Call Trace: [ 571.379098] __schedule+0x7be/0x1cf0 [ 571.382902] ? __mutex_lock+0x737/0x1470 [ 571.387058] ? pci_mmcfg_check_reserved+0x150/0x150 [ 571.392333] schedule+0x92/0x1c0 [ 571.395704] schedule_preempt_disabled+0x13/0x20 [ 571.400529] __mutex_lock+0x73c/0x1470 [ 571.404422] ? trace_hardirqs_on+0x10/0x10 [ 571.408648] ? lo_release+0x1e/0x1b0 [ 571.412431] ? save_trace+0x250/0x290 [ 571.416233] ? mutex_trylock+0x1c0/0x1c0 [ 571.420343] ? __blkdev_put+0x397/0x7f0 [ 571.424433] ? find_held_lock+0x35/0x130 [ 571.428515] ? __blkdev_put+0x397/0x7f0 [ 571.432615] ? loop_clr_fd+0xae0/0xae0 [ 571.436504] mutex_lock_nested+0x16/0x20 [ 571.440615] ? mutex_lock_nested+0x16/0x20 [ 571.444854] lo_release+0x1e/0x1b0 [ 571.448442] ? loop_clr_fd+0xae0/0xae0 [ 571.450430] Bluetooth: Invalid header checksum [ 571.452574] __blkdev_put+0x436/0x7f0 [ 571.461035] ? bd_set_size+0xb0/0xb0 [ 571.464752] ? wait_for_completion+0x420/0x420 [ 571.469522] blkdev_put+0x88/0x510 [ 571.473137] ? fcntl_setlk+0xb90/0xb90 [ 571.477039] ? blkdev_put+0x510/0x510 [ 571.480908] blkdev_close+0x8b/0xb0 [ 571.484537] __fput+0x277/0x7a0 [ 571.487800] ____fput+0x16/0x20 [ 571.491772] task_work_run+0x119/0x190 [ 571.495683] exit_to_usermode_loop+0x1da/0x220 [ 571.500342] do_syscall_64+0x4a9/0x630 [ 571.504235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.509081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 571.514337] RIP: 0033:0x412b40 [ 571.517544] RSP: 002b:00007ffda142d698 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 571.525387] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000412b40 [ 571.532723] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 571.540009] RBP: 0000000000000287 R08: 0000000000000000 R09: 000000000000000a [ 571.547339] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 571.554695] R13: 00007ffda142d6d0 R14: 000000000004e597 R15: 00007ffda142d6e0 [ 571.560363] Bluetooth: Invalid header checksum [ 571.562034] INFO: task syz-executor.4:7050 blocked for more than 140 seconds. [ 571.573946] Not tainted 4.14.114 #4 [ 571.578091] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.586113] syz-executor.4 D25168 7050 1 0x00000004 [ 571.591814] Call Trace: [ 571.594406] __schedule+0x7be/0x1cf0 [ 571.598107] ? __mutex_lock+0x737/0x1470 [ 571.602229] ? pci_mmcfg_check_reserved+0x150/0x150 [ 571.607259] schedule+0x92/0x1c0 [ 571.610713] schedule_preempt_disabled+0x13/0x20 [ 571.615481] __mutex_lock+0x73c/0x1470 [ 571.619360] ? __mutex_unlock_slowpath+0x71/0x800 [ 571.624779] ? __blkdev_get+0x145/0x1120 [ 571.628837] ? mutex_trylock+0x1c0/0x1c0 [ 571.632979] ? exact_match+0xd/0x20 [ 571.636620] ? kobj_lookup+0x319/0x410 [ 571.640585] ? blkdev_ioctl+0x1880/0x1880 [ 571.644756] mutex_lock_nested+0x16/0x20 [ 571.648854] ? mutex_lock_nested+0x16/0x20 [ 571.653237] __blkdev_get+0x145/0x1120 [ 571.657122] ? __blkdev_put+0x7f0/0x7f0 [ 571.661307] ? bd_acquire+0x178/0x2c0 [ 571.665129] ? find_held_lock+0x35/0x130 [ 571.671498] blkdev_get+0xa8/0x8e0 [ 571.674539] Bluetooth: Invalid header checksum [ 571.681210] ? bd_may_claim+0xd0/0xd0 [ 571.689615] ? _raw_spin_unlock+0x2d/0x50 [ 571.693998] blkdev_open+0x1d1/0x260 [ 571.697734] ? security_file_open+0x8f/0x1a0 [ 571.702418] do_dentry_open+0x73e/0xeb0 [ 571.706467] ? bd_acquire+0x2c0/0x2c0 [ 571.710819] vfs_open+0x105/0x230 [ 571.714382] path_openat+0x8bd/0x3f70 [ 571.718195] ? trace_hardirqs_on+0x10/0x10 [ 571.722619] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 571.727370] ? find_held_lock+0x35/0x130 [ 571.731661] ? __alloc_fd+0x1d4/0x4a0 [ 571.735494] do_filp_open+0x18e/0x250 [ 571.739410] ? may_open_dev+0xe0/0xe0 [ 571.743364] ? _raw_spin_unlock+0x2d/0x50 [ 571.747533] ? __alloc_fd+0x1d4/0x4a0 [ 571.752141] do_sys_open+0x2c5/0x430 [ 571.755867] ? filp_open+0x70/0x70 [ 571.759414] SyS_open+0x2d/0x40 [ 571.762807] ? do_sys_open+0x430/0x430 [ 571.766713] do_syscall_64+0x1eb/0x630 [ 571.770702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.775566] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 571.780826] RIP: 0033:0x412d20 [ 571.784014] RSP: 002b:00007ffcd6b0cd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 571.790440] Bluetooth: Invalid header checksum [ 571.791799] RAX: ffffffffffffffda RBX: 000000000004e766 RCX: 0000000000412d20 [ 571.803773] RDX: 00007ffcd6b0ce1a RSI: 0000000000000002 RDI: 00007ffcd6b0ce10 [ 571.811124] RBP: 00000000000002ea R08: 0000000000000000 R09: 000000000000000a [ 571.818400] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 571.825718] R13: 00007ffcd6b0cdc0 R14: 000000000004e5ed R15: 00007ffcd6b0cdd0 [ 571.833118] INFO: task syz-executor.2:7051 blocked for more than 140 seconds. [ 571.840598] Not tainted 4.14.114 #4 [ 571.844742] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.852801] syz-executor.2 D24992 7051 1 0x00000004 [ 571.858541] Call Trace: [ 571.861183] __schedule+0x7be/0x1cf0 [ 571.864904] ? __mutex_lock+0x737/0x1470 [ 571.869072] ? pci_mmcfg_check_reserved+0x150/0x150 [ 571.874179] schedule+0x92/0x1c0 [ 571.877547] schedule_preempt_disabled+0x13/0x20 [ 571.882817] __mutex_lock+0x73c/0x1470 [ 571.886700] ? trace_hardirqs_on+0x10/0x10 [ 571.891019] ? lo_open+0x1d/0xb0 [ 571.894395] ? refcount_add+0x40/0x50 [ 571.898186] ? mutex_trylock+0x1c0/0x1c0 [ 571.900383] Bluetooth: Invalid header checksum [ 571.902299] ? find_held_lock+0x35/0x130 [ 571.911638] ? disk_get_part+0x9c/0x140 [ 571.915607] ? lock_downgrade+0x6e0/0x6e0 [ 571.919833] ? loop_unregister_transfer+0x90/0x90 [ 571.924738] mutex_lock_nested+0x16/0x20 [ 571.928820] ? mutex_lock_nested+0x16/0x20 [ 571.933129] lo_open+0x1d/0xb0 [ 571.936335] __blkdev_get+0x2c9/0x1120 [ 571.940281] ? __blkdev_put+0x7f0/0x7f0 [ 571.944340] ? bd_acquire+0x178/0x2c0 [ 571.948363] ? find_held_lock+0x35/0x130 [ 571.952668] blkdev_get+0xa8/0x8e0 [ 571.956213] ? bd_may_claim+0xd0/0xd0 [ 571.960014] ? _raw_spin_unlock+0x2d/0x50 [ 571.964249] blkdev_open+0x1d1/0x260 [ 571.967960] ? security_file_open+0x8f/0x1a0 [ 571.972484] do_dentry_open+0x73e/0xeb0 [ 571.976519] ? bd_acquire+0x2c0/0x2c0 [ 571.980382] vfs_open+0x105/0x230 [ 571.983844] path_openat+0x8bd/0x3f70 [ 571.987631] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 571.992425] ? __alloc_fd+0x1d4/0x4a0 [ 571.996227] do_filp_open+0x18e/0x250 [ 572.000095] ? may_open_dev+0xe0/0xe0 [ 572.000668] Bluetooth: Invalid header checksum [ 572.003912] ? _raw_spin_unlock+0x2d/0x50 [ 572.013049] ? __alloc_fd+0x1d4/0x4a0 [ 572.016946] do_sys_open+0x2c5/0x430 [ 572.020731] ? filp_open+0x70/0x70 [ 572.024272] SyS_open+0x2d/0x40 [ 572.027542] ? do_sys_open+0x430/0x430 [ 572.031511] do_syscall_64+0x1eb/0x630 [ 572.035399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.040295] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.045590] RIP: 0033:0x412d20 [ 572.048767] RSP: 002b:00007fff51563be8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 572.056561] RAX: ffffffffffffffda RBX: 000000000004e8f9 RCX: 0000000000412d20 [ 572.063869] RDX: 00007fff51563c7a RSI: 0000000000000002 RDI: 00007fff51563c70 [ 572.071357] RBP: 00000000000002c6 R08: 0000000000000000 R09: 000000000000000a [ 572.078626] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 572.085952] R13: 00007fff51563c20 R14: 000000000004e5c8 R15: 00007fff51563c30 [ 572.093304] INFO: task syz-executor.0:13588 blocked for more than 140 seconds. [ 572.100733] Not tainted 4.14.114 #4 [ 572.104881] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.112908] syz-executor.0 D26192 13588 7048 0x00000004 [ 572.118547] Call Trace: [ 572.120551] Bluetooth: Invalid header checksum [ 572.121184] __schedule+0x7be/0x1cf0 [ 572.129414] ? __mutex_lock+0x737/0x1470 [ 572.133561] ? pci_mmcfg_check_reserved+0x150/0x150 [ 572.138579] schedule+0x92/0x1c0 [ 572.142578] schedule_preempt_disabled+0x13/0x20 [ 572.147343] __mutex_lock+0x73c/0x1470 [ 572.151458] ? trace_hardirqs_on+0x10/0x10 [ 572.156061] ? lo_release+0x84/0x1b0 [ 572.159790] ? save_trace+0x250/0x290 [ 572.163683] ? mutex_trylock+0x1c0/0x1c0 [ 572.167929] ? __blkdev_put+0x397/0x7f0 [ 572.172027] ? find_held_lock+0x35/0x130 [ 572.176092] ? __blkdev_put+0x397/0x7f0 [ 572.180117] ? loop_clr_fd+0xae0/0xae0 [ 572.184011] mutex_lock_nested+0x16/0x20 [ 572.188066] ? mutex_lock_nested+0x16/0x20 [ 572.192494] lo_release+0x84/0x1b0 [ 572.196078] ? loop_clr_fd+0xae0/0xae0 [ 572.199951] __blkdev_put+0x436/0x7f0 [ 572.203901] ? bd_set_size+0xb0/0xb0 [ 572.207613] ? wait_for_completion+0x420/0x420 [ 572.212267] blkdev_put+0x88/0x510 [ 572.215807] ? fcntl_setlk+0xb90/0xb90 [ 572.219829] ? blkdev_put+0x510/0x510 [ 572.223753] blkdev_close+0x8b/0xb0 [ 572.227414] __fput+0x277/0x7a0 [ 572.230430] Bluetooth: Invalid header checksum [ 572.230764] ____fput+0x16/0x20 [ 572.238536] task_work_run+0x119/0x190 [ 572.242484] exit_to_usermode_loop+0x1da/0x220 [ 572.247068] do_syscall_64+0x4a9/0x630 [ 572.251113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.255969] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.261230] RIP: 0033:0x412b61 [ 572.264464] RSP: 002b:00007f7b93e3b9f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 572.272910] RAX: 0000000000000000 RBX: 00007f7b93e3c6d4 RCX: 0000000000412b61 [ 572.280349] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 572.287682] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000c [ 572.295031] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 572.302349] R13: 0000000000000000 R14: 0000000000000005 R15: 00000000ffffffff [ 572.309638] INFO: task syz-executor.5:13599 blocked for more than 140 seconds. [ 572.317138] Not tainted 4.14.114 #4 [ 572.321321] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.329362] syz-executor.5 D28608 13599 7047 0x00000004 [ 572.335254] Call Trace: [ 572.337851] __schedule+0x7be/0x1cf0 [ 572.340483] Bluetooth: Invalid header checksum [ 572.341614] ? __mutex_lock+0x737/0x1470 [ 572.350230] ? pci_mmcfg_check_reserved+0x150/0x150 [ 572.355281] schedule+0x92/0x1c0 [ 572.358636] schedule_preempt_disabled+0x13/0x20 [ 572.363467] __mutex_lock+0x73c/0x1470 [ 572.367356] ? blkdev_reread_part+0x1f/0x40 [ 572.371772] ? mutex_trylock+0x1c0/0x1c0 [ 572.375882] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 572.380714] ? check_preemption_disabled+0x3c/0x250 [ 572.385765] mutex_lock_nested+0x16/0x20 [ 572.389811] ? mutex_lock_nested+0x16/0x20 [ 572.394189] blkdev_reread_part+0x1f/0x40 [ 572.398345] loop_reread_partitions+0x7c/0x90 [ 572.403351] loop_set_status+0xc28/0x1200 [ 572.407503] loop_set_status64+0xa6/0xf0 [ 572.411645] ? loop_set_status_old+0x2d0/0x2d0 [ 572.416289] lo_ioctl+0x5c1/0x1c70 [ 572.419826] ? blkdev_ioctl+0x84/0x1880 [ 572.423872] ? loop_probe+0x160/0x160 [ 572.427740] blkdev_ioctl+0x983/0x1880 [ 572.431696] ? blkpg_ioctl+0x980/0x980 [ 572.435590] ? __might_sleep+0x93/0xb0 [ 572.439465] ? __fget+0x210/0x370 [ 572.443143] block_ioctl+0xde/0x120 [ 572.446779] ? blkdev_fallocate+0x3b0/0x3b0 [ 572.450419] Bluetooth: Invalid header checksum [ 572.451164] do_vfs_ioctl+0x7b9/0x1070 [ 572.459549] ? selinux_file_mprotect+0x5d0/0x5d0 [ 572.464361] ? lock_downgrade+0x6e0/0x6e0 [ 572.469598] ? ioctl_preallocate+0x1c0/0x1c0 [ 572.474224] ? __fget+0x237/0x370 [ 572.477692] ? security_file_ioctl+0x8f/0xc0 [ 572.482169] SyS_ioctl+0x8f/0xc0 [ 572.485593] ? do_vfs_ioctl+0x1070/0x1070 [ 572.489754] do_syscall_64+0x1eb/0x630 [ 572.493743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.498619] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.503865] RIP: 0033:0x458c17 [ 572.507199] RSP: 002b:00007f572f0219f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 572.515222] RAX: ffffffffffffffda RBX: 00007f572f0226d4 RCX: 0000000000458c17 [ 572.522546] RDX: 00007f572f021ab0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 572.530700] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 572.542391] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000004 [ 572.549798] R13: 0000000000000004 R14: 0000000000000005 R15: 00000000ffffffff [ 572.550521] Bluetooth: Invalid header checksum [ 572.557401] INFO: task blkid:13596 blocked for more than 140 seconds. [ 572.569179] Not tainted 4.14.114 #4 [ 572.573502] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.581702] blkid D28512 13596 7340 0x00000004 [ 572.587435] Call Trace: [ 572.590101] __schedule+0x7be/0x1cf0 [ 572.593830] ? __mutex_lock+0x737/0x1470 [ 572.597895] ? pci_mmcfg_check_reserved+0x150/0x150 [ 572.603091] schedule+0x92/0x1c0 [ 572.606458] schedule_preempt_disabled+0x13/0x20 [ 572.611435] __mutex_lock+0x73c/0x1470 [ 572.615348] ? lo_release+0x1e/0x1b0 [ 572.619054] ? mutex_trylock+0x1c0/0x1c0 [ 572.623197] ? blkdev_put+0x7b/0x510 [ 572.626925] ? blkdev_put+0x7b/0x510 [ 572.630836] ? loop_clr_fd+0xae0/0xae0 [ 572.634852] mutex_lock_nested+0x16/0x20 [ 572.639057] ? mutex_lock_nested+0x16/0x20 [ 572.643377] lo_release+0x1e/0x1b0 [ 572.647091] ? loop_clr_fd+0xae0/0xae0 [ 572.651067] __blkdev_put+0x436/0x7f0 [ 572.654978] ? bd_set_size+0xb0/0xb0 [ 572.658708] ? wait_for_completion+0x420/0x420 [ 572.663978] blkdev_put+0x88/0x510 [ 572.667595] ? fcntl_setlk+0xb90/0xb90 [ 572.670415] Bluetooth: Invalid header checksum [ 572.671570] ? blkdev_put+0x510/0x510 [ 572.679864] blkdev_close+0x8b/0xb0 [ 572.683606] __fput+0x277/0x7a0 [ 572.687049] ____fput+0x16/0x20 [ 572.690424] task_work_run+0x119/0x190 [ 572.694334] exit_to_usermode_loop+0x1da/0x220 [ 572.698990] do_syscall_64+0x4a9/0x630 [ 572.702962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.707826] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.713420] RIP: 0033:0x7f1bcbcdc2b0 [ 572.717137] RSP: 002b:00007ffc1bfd71e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 572.724901] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1bcbcdc2b0 [ 572.732244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 572.739593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 572.747062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000002136030 [ 572.754394] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 572.761782] INFO: task blkid:13598 blocked for more than 140 seconds. [ 572.768364] Not tainted 4.14.114 #4 [ 572.772578] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.780298] Bluetooth: Invalid header checksum [ 572.780640] blkid D28512 13598 7563 0x00000004 [ 572.791627] Call Trace: [ 572.794376] __schedule+0x7be/0x1cf0 [ 572.798354] ? __mutex_lock+0x737/0x1470 [ 572.802565] ? pci_mmcfg_check_reserved+0x150/0x150 [ 572.807652] schedule+0x92/0x1c0 [ 572.811105] schedule_preempt_disabled+0x13/0x20 [ 572.816195] __mutex_lock+0x73c/0x1470 [ 572.820274] ? trace_hardirqs_on+0x10/0x10 [ 572.824581] ? lo_release+0x1e/0x1b0 [ 572.828412] ? save_trace+0x250/0x290 [ 572.832327] ? mutex_trylock+0x1c0/0x1c0 [ 572.836452] ? __blkdev_put+0x397/0x7f0 [ 572.840541] ? find_held_lock+0x35/0x130 [ 572.844741] ? __blkdev_put+0x397/0x7f0 [ 572.848868] ? loop_clr_fd+0xae0/0xae0 [ 572.852901] mutex_lock_nested+0x16/0x20 [ 572.857106] ? mutex_lock_nested+0x16/0x20 [ 572.861445] lo_release+0x1e/0x1b0 [ 572.865109] ? loop_clr_fd+0xae0/0xae0 [ 572.869003] __blkdev_put+0x436/0x7f0 [ 572.872995] ? bd_set_size+0xb0/0xb0 [ 572.876798] ? wait_for_completion+0x420/0x420 [ 572.881597] blkdev_put+0x88/0x510 [ 572.885217] ? fcntl_setlk+0xb90/0xb90 [ 572.889138] ? blkdev_put+0x510/0x510 [ 572.890384] Bluetooth: Invalid header checksum [ 572.893053] blkdev_close+0x8b/0xb0 [ 572.901329] __fput+0x277/0x7a0 [ 572.904631] ____fput+0x16/0x20 [ 572.907934] task_work_run+0x119/0x190 [ 572.911934] exit_to_usermode_loop+0x1da/0x220 [ 572.916550] do_syscall_64+0x4a9/0x630 [ 572.921252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.926237] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.931553] RIP: 0033:0x7f8dbfb1a2b0 [ 572.935351] RSP: 002b:00007ffe582d53a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 572.943263] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8dbfb1a2b0 [ 572.950643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 572.958050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 572.965412] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000014f3030 [ 572.972834] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 572.980335] INFO: task syz-executor.3:13603 blocked for more than 140 seconds. [ 572.987716] Not tainted 4.14.114 #4 [ 572.991954] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.999947] syz-executor.3 D29344 13603 7046 0x00000004 [ 573.000673] Bluetooth: Invalid header checksum [ 573.005726] Call Trace: [ 573.012902] __schedule+0x7be/0x1cf0 [ 573.016619] ? __mutex_lock+0x737/0x1470 [ 573.020805] ? pci_mmcfg_check_reserved+0x150/0x150 [ 573.025849] schedule+0x92/0x1c0 [ 573.029222] schedule_preempt_disabled+0x13/0x20 [ 573.034190] __mutex_lock+0x73c/0x1470 [ 573.038118] ? lo_ioctl+0x87/0x1c70 [ 573.041882] ? lock_downgrade+0x621/0x6e0 [ 573.046069] ? mutex_trylock+0x1c0/0x1c0 [ 573.050827] ? avc_has_extended_perms+0x8ec/0xe40 [ 573.055717] ? putname+0xdb/0x120 [ 573.059179] ? avc_ss_reset+0x110/0x110 [ 573.063275] ? kasan_slab_free+0x75/0xc0 [ 573.067378] mutex_lock_nested+0x16/0x20 [ 573.071645] ? mutex_lock_nested+0x16/0x20 [ 573.075903] lo_ioctl+0x87/0x1c70 [ 573.079372] ? loop_probe+0x160/0x160 [ 573.083387] blkdev_ioctl+0x983/0x1880 [ 573.087291] ? blkpg_ioctl+0x980/0x980 [ 573.091275] ? __might_sleep+0x93/0xb0 [ 573.095198] ? __fget+0x210/0x370 [ 573.098659] block_ioctl+0xde/0x120 [ 573.102404] ? blkdev_fallocate+0x3b0/0x3b0 [ 573.106740] do_vfs_ioctl+0x7b9/0x1070 [ 573.110520] Bluetooth: Invalid header checksum [ 573.111261] ? selinux_file_mprotect+0x5d0/0x5d0 [ 573.120237] ? lock_downgrade+0x6e0/0x6e0 [ 573.124406] ? ioctl_preallocate+0x1c0/0x1c0 [ 573.128824] ? __fget+0x237/0x370 [ 573.132485] ? security_file_ioctl+0x8f/0xc0 [ 573.136923] SyS_ioctl+0x8f/0xc0 [ 573.140390] ? do_vfs_ioctl+0x1070/0x1070 [ 573.144569] do_syscall_64+0x1eb/0x630 [ 573.148481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.153442] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.158632] RIP: 0033:0x458c17 [ 573.161856] RSP: 002b:00007f849d2d4a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.169576] RAX: ffffffffffffffda RBX: 00000000200003a8 RCX: 0000000000458c17 [ 573.176913] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 573.184606] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 573.191956] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 573.199238] R13: 00000000004c79d9 R14: 00000000004dda18 R15: 00000000ffffffff [ 573.206617] INFO: task blkid:13602 blocked for more than 140 seconds. [ 573.213235] Not tainted 4.14.114 #4 [ 573.217398] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.220383] Bluetooth: Invalid header checksum [ 573.225437] blkid D29040 13602 7009 0x00000004 [ 573.235617] Call Trace: [ 573.238202] __schedule+0x7be/0x1cf0 [ 573.241964] ? __mutex_lock+0x737/0x1470 [ 573.246043] ? pci_mmcfg_check_reserved+0x150/0x150 [ 573.251114] schedule+0x92/0x1c0 [ 573.254490] schedule_preempt_disabled+0x13/0x20 [ 573.259249] __mutex_lock+0x73c/0x1470 [ 573.263204] ? lo_open+0x1d/0xb0 [ 573.266576] ? refcount_add+0x40/0x50 [ 573.270450] ? mutex_trylock+0x1c0/0x1c0 [ 573.274531] ? exact_match+0xd/0x20 [ 573.278178] ? kobj_lookup+0x319/0x410 [ 573.282141] ? loop_unregister_transfer+0x90/0x90 [ 573.286998] mutex_lock_nested+0x16/0x20 [ 573.291122] ? mutex_lock_nested+0x16/0x20 [ 573.295372] lo_open+0x1d/0xb0 [ 573.301697] __blkdev_get+0xab1/0x1120 [ 573.305593] ? __blkdev_put+0x7f0/0x7f0 [ 573.309546] ? bd_acquire+0x178/0x2c0 [ 573.313931] ? find_held_lock+0x35/0x130 [ 573.317994] blkdev_get+0xa8/0x8e0 [ 573.321610] ? bd_may_claim+0xd0/0xd0 [ 573.325423] ? _raw_spin_unlock+0x2d/0x50 [ 573.329554] blkdev_open+0x1d1/0x260 [ 573.330366] Bluetooth: Invalid header checksum [ 573.333349] ? security_file_open+0x8f/0x1a0 [ 573.342535] do_dentry_open+0x73e/0xeb0 [ 573.346523] ? bd_acquire+0x2c0/0x2c0 [ 573.350405] vfs_open+0x105/0x230 [ 573.353875] path_openat+0x8bd/0x3f70 [ 573.357673] ? trace_hardirqs_on+0x10/0x10 [ 573.361976] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 573.366648] ? find_held_lock+0x35/0x130 [ 573.370796] ? __alloc_fd+0x1d4/0x4a0 [ 573.374619] do_filp_open+0x18e/0x250 [ 573.378404] ? may_open_dev+0xe0/0xe0 [ 573.382253] ? _raw_spin_unlock+0x2d/0x50 [ 573.386402] ? __alloc_fd+0x1d4/0x4a0 [ 573.390278] do_sys_open+0x2c5/0x430 [ 573.394011] ? filp_open+0x70/0x70 [ 573.397535] SyS_open+0x2d/0x40 [ 573.400879] ? do_sys_open+0x430/0x430 [ 573.404770] do_syscall_64+0x1eb/0x630 [ 573.408641] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.413553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.418779] RIP: 0033:0x7f895d42d120 [ 573.422545] RSP: 002b:00007ffc044dcd28 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 573.430401] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f895d42d120 [ 573.437690] RDX: 00007ffc044ddf41 RSI: 0000000000000000 RDI: 00007ffc044ddf41 [ 573.440421] Bluetooth: Invalid header checksum [ 573.445687] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 573.456923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001adf030 [ 573.464234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 573.471592] INFO: task blkid:13606 blocked for more than 140 seconds. [ 573.478178] Not tainted 4.14.114 #4 [ 573.482404] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.490444] blkid D29040 13606 7192 0x00000004 [ 573.496081] Call Trace: [ 573.498656] __schedule+0x7be/0x1cf0 [ 573.502431] ? __mutex_lock+0x737/0x1470 [ 573.506536] ? pci_mmcfg_check_reserved+0x150/0x150 [ 573.511625] schedule+0x92/0x1c0 [ 573.515022] schedule_preempt_disabled+0x13/0x20 [ 573.519762] __mutex_lock+0x73c/0x1470 [ 573.523708] ? __mutex_unlock_slowpath+0x71/0x800 [ 573.528578] ? __blkdev_get+0x145/0x1120 [ 573.532702] ? mutex_trylock+0x1c0/0x1c0 [ 573.536963] ? exact_match+0xd/0x20 [ 573.540704] ? kobj_lookup+0x319/0x410 [ 573.544592] ? blkdev_ioctl+0x1880/0x1880 [ 573.548847] mutex_lock_nested+0x16/0x20 [ 573.550382] Bluetooth: Invalid header checksum [ 573.552988] ? mutex_lock_nested+0x16/0x20 [ 573.561748] __blkdev_get+0x145/0x1120 [ 573.565630] ? __blkdev_put+0x7f0/0x7f0 [ 573.569585] ? bd_acquire+0x178/0x2c0 [ 573.574076] ? find_held_lock+0x35/0x130 [ 573.578163] blkdev_get+0xa8/0x8e0 [ 573.583883] ? bd_may_claim+0xd0/0xd0 [ 573.587691] ? _raw_spin_unlock+0x2d/0x50 [ 573.592537] blkdev_open+0x1d1/0x260 [ 573.596250] ? security_file_open+0x8f/0x1a0 [ 573.602736] do_dentry_open+0x73e/0xeb0 [ 573.606711] ? bd_acquire+0x2c0/0x2c0 [ 573.611116] vfs_open+0x105/0x230 [ 573.614577] path_openat+0x8bd/0x3f70 [ 573.618369] ? trace_hardirqs_on+0x10/0x10 [ 573.624778] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 573.629446] ? find_held_lock+0x35/0x130 [ 573.634088] ? __alloc_fd+0x1d4/0x4a0 [ 573.637886] do_filp_open+0x18e/0x250 [ 573.643746] ? may_open_dev+0xe0/0xe0 [ 573.647560] ? _raw_spin_unlock+0x2d/0x50 [ 573.652416] ? __alloc_fd+0x1d4/0x4a0 [ 573.652511] Bluetooth: Invalid header checksum [ 573.656270] do_sys_open+0x2c5/0x430 [ 573.664682] ? filp_open+0x70/0x70 [ 573.677256] SyS_open+0x2d/0x40 [ 573.681024] ? do_sys_open+0x430/0x430 [ 573.684925] do_syscall_64+0x1eb/0x630 [ 573.688801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.693699] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.698893] RIP: 0033:0x7fbcfee44120 [ 573.702641] RSP: 002b:00007ffd3fc9b358 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 573.710402] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbcfee44120 [ 573.717688] RDX: 00007ffd3fc9cf34 RSI: 0000000000000000 RDI: 00007ffd3fc9cf34 [ 573.725004] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 573.732348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000f57030 [ 573.739614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 573.746951] [ 573.746951] Showing all locks held in the system: [ 573.753325] 1 lock held by khungtaskd/1008: [ 573.757759] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 573.766936] 2 locks held by getty/7001: [ 573.770964] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.779755] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.789180] 2 locks held by getty/7002: [ 573.793183] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.801946] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.811295] 2 locks held by getty/7003: [ 573.816125] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.825116] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.836137] 2 locks held by getty/7004: [ 573.840177] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.848874] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.858359] 2 locks held by getty/7005: [ 573.862380] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.871168] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.880525] 2 locks held by getty/7006: [ 573.884498] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.893226] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.902610] 2 locks held by getty/7007: [ 573.906576] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.915348] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.924704] 2 locks held by syz-executor.1/7049: [ 573.929476] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 573.938035] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 573.946519] 1 lock held by syz-executor.4/7050: [ 573.951263] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 573.959969] 2 locks held by syz-executor.2/7051: [ 573.964776] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 573.973752] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 573.982106] 3 locks held by syz-executor.0/13588: [ 573.986968] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 573.995561] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 574.004028] #2: (loop_ctl_mutex#2){+.+.}, at: [] lo_release+0x84/0x1b0 [ 574.012537] 2 locks held by syz-executor.5/13599: [ 574.017391] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 574.025789] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 574.034793] 2 locks held by blkid/13596: [ 574.038855] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 574.047415] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 574.055898] 2 locks held by blkid/13598: [ 574.059950] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 574.068500] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 574.077070] 1 lock held by syz-executor.3/13603: [ 574.081892] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 574.090334] 2 locks held by blkid/13602: [ 574.094390] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.103119] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 574.111260] 1 lock held by blkid/13606: [ 574.115241] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.123964] 1 lock held by blkid/13607: [ 574.127932] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.136711] [ 574.138347] ============================================= [ 574.138347] [ 574.145661] NMI backtrace for cpu 1 [ 574.145808] Bluetooth: Invalid header checksum [ 574.149300] CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 574.154020] Bluetooth: Invalid header checksum [ 574.160476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.160481] Call Trace: [ 574.160501] dump_stack+0x138/0x19c [ 574.160513] nmi_cpu_backtrace.cold+0x57/0x94 [ 574.160523] ? irq_force_complete_move.cold+0x7d/0x7d [ 574.160532] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 574.160541] arch_trigger_cpumask_backtrace+0x14/0x20 [ 574.160553] watchdog+0x5e7/0xb90 [ 574.167103] Bluetooth: Invalid header checksum [ 574.174983] kthread+0x31c/0x430 [ 574.174993] ? hungtask_pm_notify+0x60/0x60 [ 574.174999] ? kthread_create_on_node+0xd0/0xd0 [ 574.175011] ret_from_fork+0x3a/0x50 [ 574.175114] Sending NMI from CPU 1 to CPUs 0: [ 574.178671] Bluetooth: Invalid header checksum [ 574.181960] NMI backtrace for cpu 0 [ 574.181964] CPU: 0 PID: 9130 Comm: kworker/u4:19 Not tainted 4.14.114 #4 [ 574.181969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.181972] Workqueue: events_unbound flush_to_ldisc [ 574.181977] task: ffff88808eddc100 task.stack: ffff888061cf0000 [ 574.181980] RIP: 0010:lock_release+0xc4/0x940 [ 574.181983] RSP: 0018:ffff8880aee07b10 EFLAGS: 00000082 [ 574.181988] RAX: 1ffffffff0ee296c RBX: 1ffff11015dc0f69 RCX: 00000000b90f84fa [ 574.181992] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff88808eddc97c [ 574.181995] RBP: ffff8880aee07bb0 R08: 000000000000528d R09: ffffffff8925da28 [ 574.181999] R10: 0000000000000000 R11: ffff88808eddc100 R12: ffffffff8925da40 [ 574.182002] R13: ffffffff82d8664d R14: ffff88808eddc100 R15: ffff8880aee07b88 [ 574.182006] FS: 0000000000000000(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 574.182009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.182013] CR2: 00007fc7340645c8 CR3: 0000000096ed2000 CR4: 00000000001406f0 [ 574.182016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.182020] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.182022] Call Trace: [ 574.182024] [ 574.182026] ? lock_acquire+0x16f/0x430 [ 574.182029] ? lock_downgrade+0x6e0/0x6e0 [ 574.182032] _raw_spin_unlock_irqrestore+0x1f/0xe0 [ 574.182034] debug_object_activate+0x1dd/0x460 [ 574.182037] ? debug_object_free+0x3f0/0x3f0 [ 574.182039] ? find_held_lock+0x35/0x130 [ 574.182042] __queue_work+0x7a/0xf40 [ 574.182045] ? check_preemption_disabled+0x3c/0x250 [ 574.182047] delayed_work_timer_fn+0x6e/0x90 [ 574.182050] ? rcu_read_lock_sched_held+0x110/0x130 [ 574.182053] call_timer_fn+0x164/0x680 [ 574.182055] ? work_on_cpu_safe+0x80/0x80 [ 574.182058] ? __next_timer_interrupt+0x140/0x140 [ 574.182060] ? lock_downgrade+0x6e0/0x6e0 [ 574.182063] run_timer_softirq+0x3c6/0x1570 [ 574.182066] ? work_on_cpu_safe+0x80/0x80 [ 574.182068] ? add_timer+0xae0/0xae0 [ 574.182070] ? __lock_is_held+0xb6/0x140 [ 574.182073] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 574.182076] __do_softirq+0x24e/0x9ae [ 574.182078] ? sched_clock+0x2e/0x50 [ 574.182081] irq_exit+0x160/0x1b0 [ 574.182083] smp_apic_timer_interrupt+0x156/0x600 [ 574.182086] apic_timer_interrupt+0x8e/0xa0 [ 574.182088] [ 574.182091] RIP: 0010:vprintk_emit+0x524/0x600 [ 574.182093] RSP: 0018:ffff888061cf78d8 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10 [ 574.182100] RAX: ffff88808eddc100 RBX: 1ffffffff0ee296d RCX: 1ffff11011dbb948 [ 574.182103] RDX: 0000000000000000 RSI: ffff88808eddca20 RDI: 0000000000000297 [ 574.182107] RBP: ffff888061cf7918 R08: ffff88808eddc100 R09: ffff88808eddca40 [ 574.182110] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000022 [ 574.182114] R13: 0000000000000297 R14: ffff8880a87fa4c0 R15: 0000000000000000 [ 574.182116] vprintk_default+0x28/0x30 [ 574.182119] vprintk_func+0x5d/0x159 [ 574.182121] printk+0x9e/0xbc [ 574.182124] ? show_regs_print_info+0x63/0x63 [ 574.182127] ? kmem_cache_alloc_node_trace+0x37c/0x770 [ 574.182129] ? kasan_unpoison_shadow+0x35/0x50 [ 574.182132] ? kasan_kmalloc+0xce/0xf0 [ 574.182134] bt_err+0xc4/0xdc [ 574.182136] ? bt_warn+0xdc/0xdc [ 574.182139] ? memset+0x32/0x40 [ 574.182141] ? __alloc_skb+0x3ee/0x500 [ 574.182144] ? skb_scrub_packet+0x4b0/0x4b0 [ 574.182146] h5_rx_3wire_hdr+0x2a7/0x370 [ 574.182149] ? skb_put+0x161/0x1c0 [ 574.182151] h5_recv+0x261/0x400 [ 574.182154] ? h5_slip_one_byte+0x1b0/0x1b0 [ 574.182156] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 574.182159] hci_uart_tty_receive+0x1fa/0x4d0 [ 574.182162] ? hci_uart_write_work+0x6c0/0x6c0 [ 574.182164] tty_ldisc_receive_buf+0x151/0x1a0 [ 574.182167] tty_port_default_receive_buf+0x73/0xa0 [ 574.182170] flush_to_ldisc+0x1f2/0x400 [ 574.182172] process_one_work+0x868/0x1610 [ 574.182175] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 574.182178] worker_thread+0x5d9/0x1050 [ 574.182180] kthread+0x31c/0x430 [ 574.182183] ? process_one_work+0x1610/0x1610 [ 574.182185] ? kthread_create_on_node+0xd0/0xd0 [ 574.182188] ret_from_fork+0x3a/0x50 [ 574.182189] Code: 60 4b 71 87 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 ce 06 00 00 48 83 3d e3 08 29 06 00 0f 84 42 05 00 00 9c <58> 0f 1f 44 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 45 88 48 [ 574.186444] Kernel panic - not syncing: hung_task: blocked tasks [ 574.653370] CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 574.659938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.669294] Call Trace: [ 574.672221] dump_stack+0x138/0x19c [ 574.681049] panic+0x1f2/0x438 [ 574.686391] ? add_taint.cold+0x16/0x16 [ 574.690385] ? ___preempt_schedule+0x16/0x18 [ 574.694798] watchdog+0x5f8/0xb90 [ 574.698263] kthread+0x31c/0x430 [ 574.701622] ? hungtask_pm_notify+0x60/0x60 [ 574.705939] ? kthread_create_on_node+0xd0/0xd0 [ 574.710598] ret_from_fork+0x3a/0x50 [ 574.715508] Kernel Offset: disabled [ 574.719151] Rebooting in 86400 seconds..