400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 264.974434][ T5197] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 264.979561][ T5197] Bluetooth: hci0: wrong event for mode 0 02:08:23 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 264.982895][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:23 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 264.994563][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 265.017274][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 265.023633][ T5197] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 265.025695][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 265.033823][ T5197] Bluetooth: hci2: wrong event for mode 0 02:08:24 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:24 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:24 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) 02:08:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x110, r4, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x103) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x10001, 0x20a001) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff}, 0x80) r10 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "739801f8f0de100b7a25f7d1d56f1fe9f1288d3852416ed0f0542a9265149724d7de4f793ee8cdd812c167d9b2a8eea1509e123796cdbc444a9d9f5f364adcd6"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000340), 0x48000, 0xcfe063793c3a209a) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r12, 0x0, 0x0) ptrace$peeksig(0x2, r12, &(0x7f00000001c0)={0x81, 0x1, 0x3}, &(0x7f00000003c0)=[{}, {}, {}]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003e40)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000003f40)=0xe4) r14 = openat$ipvs(0xffffff9c, &(0x7f0000003f80)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="f93531d9db3a047fae43425e33e050001cf9a5a78a1971e8800929d13ca79041222fc073ba7667c77246eeaa2436687a05a4aa2b3e9436c6ed1832a215cdda3702a186b3f082ddc63e08623a6e6a2edd81b73340d4ff13a06989a9381e3273492b721d1570434b0802b99ae4bb6cd86f1f92325c37eaf8c0512857170826ef7048ccc1688eb7df", 0x87}, {&(0x7f0000000140)="23486843a4e2d98c580782f80464c4da5da3ee88b05d0b8298b8d796f9a4f73009b65c61f7432fe7e070947bdf939e43", 0x30}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="3ff0ee8ed0d2d2ed4b86b71037a4b625348b709044382f523a4ce2df7addf1c232887321d1512962335ca16846c87f19e6587a8a37d4060abb807107c64583c02ea9562c531211328de29d9e735b0778feed9e9921254701", 0x58}, {&(0x7f0000001540)="10a17f61e05784fd5ad79a2b0b7c949364dfb0c3966978a8d41655150098e0780d4eac805eb1ce7e13a114ca869c7815661e49c18ea0c3acc1327bf69963d4b0168ec4fe1ddd0f2a00e13cd7bf7767d371a1052976d595c391d0c7080ed0c8", 0x5f}, {&(0x7f00000015c0)="e704b2463673e5e6123e4494fa1a695342d35937906576cfeecc5e68d3bc59447d7728c47e0d4f7de9298da7d045be5266e611ec590aa3b903caa56069dcee23be21e1c347e4f4fe509fe5c466bdb1ffd315ae72577358ffb33caaa3bbc0a5da19fa4e8d9430d7892560ebce609dda324d659eeada080217a89df2d24cd3453ee1a451d3b02b6e092fbdf72ab9561b963cff650640482c9cdd", 0x99}], 0x6, &(0x7f0000001680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r7, r8, r9, r11, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r12, 0xee00}}}], 0x70}}, {{&(0x7f0000001740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f00000017c0)="66d2d5383ccc2461a2b83ae43bfe19be36eae564352da75ba15750b33b667af645b572f2022f789fb1e3eb40e13930d40a67ba633b589f077130853f196b2dc19fb81163d2d3cfe6b48b03c0386062d947", 0x51}, {&(0x7f0000001840)="094cccbd0bf21a2bc6950bcd6e1f0a8a60e58fa36999b8d7e1117a4a0679f64e70250ba4ed19f7eba3a3f7638df42c53d3fa93a3434ef6bf75462260177bd55f9b98593ed67b03b6c6f55a3afaa86e26b1e687e4ba01230a266c0adddc832f955dc65e29a396c736b576dba118b5894cab973b414e86dda39cc042457171d22e899c7f9af8ede96148f9f143edfbb1579790985dee50042e3d53235a5372ff6deaf8aa614c75a9ca0f2393ee", 0xac}, {&(0x7f0000001900)="94d28e14530fe4c98728fbd8e3e8794c22170947454c28a097873f5123f997f13cd909e21a99ad0b4f288d21cb27930aa41cb6df9207e56027cbc48c1d3d128727e0d1a620320246880a45cc0f9fc0cf84b9ca2e87bd0f63f730c3d85776e009c2ecf0e43f6847dede884fa2076ac7a4b68a02d87f6a8cf8f87505a22f2e1fbc678c78d1941de87a8536595b9d415a185e926785f590081cee", 0x99}, {&(0x7f00000019c0)="07e646711a01ed09ca2aa298961174741b58764cc1a675c5c642d760677ac9c804a64da19cba3254a600679b23ae7fd9800861dcd34819927e2e5a2661977b3c2ae69329214715e778b74fde1b61b5ef4ac7ad99157fe2a7e0b34eab902703ac97c312d1be1b7d2df2f62576470248180875aa0692f3903966dfeabb9e06302cf8cd3b89647745dd72f71b2bc0ee7609a0f6b94ef3775c524ffb57d24aba9042", 0xa0}, {&(0x7f0000001a80)="715b0a956217c41bdb76afb95e99d27603e15446a0cb0775bcdac1259633e274f90c50dd2bd13ff7f39ef64a810e425c453ff0944b8697b9fb19450245e8bdddbaa6e603a2896255cdda31a6d9ad97e983f7c02b8043c5a22793f1641afb5552beea31614e3a8194c9554f097be7fd29f27b66ceaa14bc44ce5f2c1c42e23a6300ada635192f60faae4178f414cf7e9c9c11c1c6d742c0f8533ec6a5e2667535b4b0cddbbcd6cc25199ba8b9dc54a6bcf3c4b9a053bdf3ba05a411bbefe9f335d34bfc07c762e2d659d1fc32e1891bf2a72f8479a6d189be5b2bbdddea31bdfff6b22a2ed288edbc8e575f48759e699f691301f7dfd55fe17d73b9dfb9f69ba711e58310ba40a00085109ddeea95f18cd55c54b4f7af8d6de6eb9943a8fd196b0bd66f6899afb0d0fde4d69a097fac2e971015982378f9e08f7bde476e7ba633991f48d2aee533a20823a766ce6d7bc881d65dc695a96fc37d989ebdc317c01e1063c8664bb2460b2b31d9be73babc25d777b55fe90b4ae48cf9192860f2c807ebde6b4b0e135c9b2356aece24acaade198baf7fb583bc59f324461b2343ef3a03288a925af42a3a7e8998224324c18d93461753d14ddfe914c03d49c0c39a18d6f5b2c36b7d5f8c51161885d6485f40f77ac0c2ce0939423ed39ac53687d6bc8f6262d920a73824e10aab965ef2929ad23eccbdad01e2141e25d39c735c3293c1b129e86f97253dfcde29a92981a335bd90c82af06e8f4b90ad144976aea7c24af0d982a7eed403b5e933b24c1ea720fefe67a8cf799a6b6f03140392d6ba36930f56f20a1a9325a07df1e7e76435f427107c9a21aa3c06ecc3b4e9e45bd5ed238b6cbfdd5ac54a3a2c52fd57958dc40065a96831532802e6ed5770f2552eb5312854e03029033d8382449b36a24e0e46db73b7d1a5cc57b56859f4b7e18a6485ff8e520917d9893425ca20c8ba2c7231c4540ad61f9652ce70eeb31e99767f78c4a8658d52e2a83e64cab931beec8c933dc45cd728c22dec7d325a6711ab60ed9eb0daf12f04e883b6c8ae94b42472cd5028391ce09f8b63a7b08efdd327474aa01a89947927fcafc6dfaff01a1826587b517da663522ae20d9919921db77780b9978f8dd345e81c8ddff5d291a14ff2cf6a805330ac302f72c61de3091e9ed2292d3a30bd3628c2ce4c8aa1fb76244a940636c86afc10985a5cabdd830c46daaa2137dbc2aac21689a19e7fd6e7ab497840636f6ac7ab35d470fbfa7001989a6fcd4318e12325e6bc8760ef9f83c6c647c077582a0992b861c9b216ddd6e82d8fae219c0547d57a5dce276232a90b3be2c524fb78db5622d3e38d3889d93cd6f92aa0bd1c2bc283a72e626ddabf4ef62d239171d7366ea2588c2babfac5d76bff88d27034c3e5849b4c570712efc5eb9d1d655ead88f70ccad2ecf184ee289b58e3822d471b1d15fbcaf3b2be60ba8d61f3ebd674633cbdec109f728a32ee1b0a3ebcfa06efa440fb927061f25daef1417b6699c71583bcb752167da94e30b155a98a278c548d3bdb09251076a3f1dc9fe7da3b13d1544d966ac0e6d38e38d5747c75cdeda8f8eec203862c81b8cad6a3d511a56b0d3b6f2ad3184d2699329c23fae752446d7c946987bc1aa290009602189dbdb24d9329fbbf1937a9d617d51c3acb92ec4faa0faa48b1174bd1fdf9a929d0ccd90b34982e46b382371fcd97a7a2a37ec1c2158374d03a22c54dd9a180625cf3e51f11afdb1721b89c90f0774b0e54bb7415b9f0e6f3c3cefa080cb3deb75a773d8c794dde8f0339927675c47aef277d3837bd1dd6ea9aa61df620ecef62b9a2c499e98d04afe88d293dd97f36c7813eb91ca2a088a6415e5e17c52be06716e4bd34db217356fa810d534a4da11c6d959daf983a8466e7caa21c1b80da8fc56bc718b835eb6906f838bded91f7287b546310801b2d455bdafef9e6b327f123d81f188a0588dc96a3e4f938846e3262e5eb532ac84f20a6aaee768b0206a34e17fe749def5b876bc638406329c33c485af3da0f6176856115aece21abdb5202358efce8046c5626342492aca81ae00592769b22be3acdc6896ae36945d80b110d466cf8eaf470cbaa245de8496fc37a3e170b06ce373b06c03c62563837c2667ec507ce1aba990aa0a4e2359b62005460bf1207d61c06f136e39db1578a9fea9f588e599000642224805acd1a178f1fd6cd871c91bc661cc24c783306a2c839587427bffa2cb3513b243682c5b4b2d74aa8a2b8766eca5e0c71d23fe76b077a1b1e95bc620c70576cb9cab774635cbc0c86e42eb4ffdf1cc559f24b4f85e3fff0b79fce6d2bcdb8e60cec15f1f2e4ec29c8c3588598f83d880093eb7a00d5cb29fa6f0fe21b659e50f81f28e1ab91cbda6c8caf78f98097e16a291d02109e785c2b4728a6cc366b34a4e6a495275120f0dd87ebaa08f283a8edee684f7d2c86709fb10b4d91521bec229d7f8d40bf5d567ac3016171b08a6d3b24f4ea610c802c8baa35018d5073b09753377372035553ce6f1679636bb05672a2dcdfc532cc2d6cf4aa351dd0892955b03558f92d1eac626e12ce613b87e8715afc4d7c738305f5df36f8a8dd1fb9523def7e14f783ad6e2e18a6edef814c4330ea617c0e2a14d622f097067204f082e697b9d69284b252dbb2934da7177563dab6a7d61dff81a570723263e76c4602337182170621b80c593f56136c2b16fdd218f55808c9a95da3e5ccdb937a4bdc4ae08c966d6a69d993a994480230416c149f027071fc92f325c29be2ff79cf9f58bb142a8cf2db6dac6255eb28116a2e8b9acb864b2a4008688c73879e9667a12672d781df1171c4ca7a5a6d38fd0963aea086308ed75bcb18b35de8dc77c3ae9e4db826aa6774079b0cab87ee66217eb8fe13c67539e44fb67382cf89a0d4e81e4af6bfcac443c88eb2e403e35af40dbff60d640b3b65185a58063e2ce5ab4559a36b11f6b29a10fbad6e33af9e5b1ba97527417b7548b53c49d23ff890262e79cb4c61d06eea26ddf90d9df8a8e78d343e2259c132dc41ac6bb3f770cb98d030f4ce36f6f3cd08c2012f9980aab8be3639144a505e95dfcc536b0965a74f4d8097cca82f53724c161a5497399fec1d1b324b94108988ff96f6b6059f6fea0b2488035f2d7d837721dac17affc5d3c2eba740f7297ca97a3b1a8e22a40e1e57437c8cb07374f20461ed256cc42796fa8ca072ac4d090be0d4ac95c00c88f5288b904b17fc6944e87b90acde7fbee1eccba05e569f0693bb3041d9e2f3230a08234e2664e666166b3b617c7552318dc3516dc822463a64f5d4db43371fd07d918c4c36ccc161b6281abcc9b7c89a21cf3a43047892233e4545fd3bbea76036ae531ce82a97ce44b8cbb5ac3ef04e02c80a58907e2efddaded11316de2722fe98c28d3850786d954b537acdee7e593df2cc7d7042bafbe9ad3fbaa90cb839fdf5aeb54e0bcefecdc4f772415b8ab1eb7f37e114dbd34429943dad21c69b2922d3b4d508dd18c3dc63b229445d1c15d2c4c2cb5e205eae23f3e9533da9e645c706346dbf4618e18903b9922efa4ebb0bf06f39d495791dd196ea2dc9b8e71003e1da1936e017b7e39f8a68f498f04df409c88e00bd148e5c69aa1673ac584f5d3aa8e0cbeb497a743f1e862d01f45d5295a3eed5718e266e7ff8aee81a0bb9d3b33528efa833b7ff2e6f2f497b3429342b31137dc5a41d2ccedc77a4a52e8c48bf1cf26aafdf062ada52f1852a24c8deeead66e25d637b1efa2c4e8535dec536201301185b4371c66990b617fa381b2fbe8ecff1438bdd86efa359b8f9d4299f9696388e67f4550ce55aadee59ab1455a66bd5f7c98117b30a0dcab23aecb0e0644b8442e44abd6a078d4a4b196f82b75711d62ec910f50488cf6521b429b4e502b8900255142cb7e5f418edbe549f04fe4048b80fa5aec15657259b93a29d088b883ce104e8eb69e8b03ec40358d32d1e1326ad47699fb77995406d9407da591991cced2e3a97057e436c9072712b1149e2e8d7f467f2f5b059aca8d10f12b596122f9e48e5802bd06c1d1bad41a2b45f54a8d53db23f98d3db05ef56042a52c0bc7d2a792fe805a75f88552463107914607b490ab672c15a1c2bd4784e2fd1013cd3cac9c37ae7595ca8c4d7676c88878edb235e96a7669b44d4ee36cbb5adbc0ac59cb3a54105a0ac6c108193f5f9d9da9bb1208a339a52e3966c95b9e1c3a8c353008e98c5cf7fc0b908a388ee79eabddc0371e2259b3c1ba428733b6e1b7ae44926a636a54058039d54a00d66a7b27f29d2bc50fed9f6a09e25a6f85195b2b38e54860d7273b9c8998126448e1d406c9d18b5481280a696d105602d7aa6e1f31c04c60a460369a3d99e8aa9d99e1be4f0ed4cdc5e8befd2811577b8393245b7a12ff0d6f1f6ae4288a7f78c1a0325cfe6c51865b71715fe36d602bd44838f798a88ecf595de223bcf9de0a3f8331a4ebc3a3e078c52b0bed234ad73c14a21f42b6692842ab2e0e0492dc9d6a0c474f0114459f032f9df0844c2d0903a20bdb07d84571595d6d6ca8e4f235fffe1dfcf878b41d0d20fe11850123f0ddcb515cc454a9127b50dec4468c0905e98d0700ea5b1640ab7c0fbce45efe668be0e8decd53746e2a98f2cf2329e618e6b2ca94ad68db183bc95e3b1bc9629caacfc3deb0e90c7115ce334a38ef7d1ba4df80088ab58d69dc17c80837bd36dd724f268c5af826372b3190df1e2eb75e3e4d2b8b822e514bb0fced3cfc48ec73f8fdb57ace645017994447f08bf406a17bc37738e6fb1d59f98474dd4de1b499495a68c62b1eaad04cfa0c753c2392ed6eb6397b527d1f28cac0e7462a964a5bbfd11c5e63ceb75d60d0a961c4f45a6d9850a2c0acc20ce8579da0c8d891b3cdb8b36d7a48f5a2ada1b0366fc23f20472459a746586bb3697ae68b2dbb9e4544db1bf9d5cf900ba2ad67a6e6a6d74765087f01691154f0004e910291818e10ec02f9a0d43d96f75dff1111ca3921c5653f0469d690f33ceee4844d300e1696a163b27366fe78933f3895d4150c23e2a1ec386d7d99c2f1bfaacaec7ca1024b0b37df5bb54893af19b6c403c3a8b1e5b5c510faf44c82064890eef35b21a5527e3fe5fb602dfc81cbafc67d27023649b2de6415b817fa39500528ae41e2d6538bbac6feb02e2f6be48135110e6560560d7b2d513297a6632bf84753699592367a97dcd56b3b9eedc389015b24d01330d7f5a18f6b5d388c8d461fcdc1832c6fddf0ccac2ce3abdf7c07b281c943481a857dfb106bd69a7c0e2f130019dd225af48f6d413ffee73b0cb76d0a482799a884c80cc0e5a973808477c8738419f1be8379ba8e541f7a7d42ab7c9f17345e2b7af85a48a1f88325fa8d9d019616662ad9073aef71aed674963c51f0e625004c969f71af6befa285a06026b759163024b07d4d9521c232d56d10898f22f8aa0824984ed046106ee44a85b680e812971861a6bdefb847c0f030e183ae267517be3920fa8a98c90914cd94fe0198e074c2f482a242d6a1146b4f2e3862e7315ff1f86b4adf8965ab99380c494d48cb9c4dc85ca1a9ac3abded9e5d992671885ce064c7b35857899ceaaec0764e476dbc8729d5bb1c5dcfad5025c18e1049c589cddba168059317f0f5d8f08c8fdfbb07d163dfd6b13b8a817ab8f82b884c4d601fb9aac8e893bd1e0ff5cdaea334de61e55855e45b34a450d0f165113a3878645f56d42c8b2b162c62c4d05c3567b8e81bd43e65c481a79", 0x1000}, {&(0x7f0000002a80)="ab40cd3d536ad5f22ae8147dd523fff7cc77fac847a4517b299577f0bfb552318171d5e306d953d3f7ea6a676c24323fe131b10b109961b2e39131ded07bce36b9780ba19e80c5776008470bb84afd4c53ec3ac3d1bb911eb946189116c484d6379130dccc316bf2ce02fdc9992d4160a1aa513e97c6b39d7c70", 0x7a}, {&(0x7f0000002b00)="4c5400c001ce5faa15202d947a5f63e41067e7d50e44816dacb205ab31386441b688a653d9d408db77f659dfb732448090d554e7fcff320191588a2902823c273e5770e019af54001055c81311948e1fdad62f04b852dee73eaa786702414329ad1990728c383481f49eaf9e55fa87d30de171122e2bd64e832502380496ec6f5a86a87622588afc36d99cf4ed19b2c13995feabacdda06303b2cbc63ee702f086ef75c870fa7362cff1d14837ef0f29c8fccfb8b9b275feee11ee7bdd2c610f404fe909d2a4f7edc849e6566eb1b911", 0xd0}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="14f600fa9142ed1c6143db582147eabb9567081e361ba5daf684865b747d96ea6389d13af73cc1ca52b50824b4e9b20b01c77740d87975f79cea1fee43fa4de47b881a777b60c2439df91129913186e178d63c8353499114abf8f64a5277a3772ef6fc93174b39ab5159e0b11b1c1cc03a043fe503692babb56dc75ddf0e90d89cb8f5ea3cd60f3ebd85530b945b8a79b743f2e777f84925247f1fb27114a796ce2592d4a651f9f5f9c4321cbd9745f62bf73d11354e8941d7f604b69fee940e198ccd2bae53633f16ccc247f0765754ecbf7146981e774fcd05afc9786f30b9f70ba9", 0xe3}, {&(0x7f0000003d00)="02d39ce76bb2ba34c96621ae373f2fbcdf01eb0a09d0c55294deebe2da36b7babd21e2c200fa8b20b9cc5f4b4a745a64722aa5e3326e70d4878283608883ac63e9948b5efed22c91ca77b756f7d33662f292cf3fbb4a8f2e857adc00493869d59631039b020e535ba3fe7b289ef35d84a7217e519ff23bc367c507e743b0ce7b43d3d9e4004efba7a13e50bce1dd2988946114e92a766f196108fd41a1cd22d127934843237d", 0xa6}], 0xa, &(0x7f0000003fc0)=[@cred={{0x18, 0x1, 0x2, {0x0, r13, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r14, r6]}}], 0x30, 0x4}}], 0x2, 0x4000801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000280)) sendmmsg$inet6(r5, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 02:08:24 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 265.796019][ T5197] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 265.796102][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 265.796347][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 265.796465][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 265.814658][ T5197] Bluetooth: hci0: wrong event for mode 0 [ 265.822856][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 265.847962][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:24 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 265.853846][ T5196] Bluetooth: hci0: wrong event for mode 0 02:08:24 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 265.897904][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 265.898723][ T5197] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 265.904459][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 265.921406][ T5196] Bluetooth: hci0: wrong event for mode 0 02:08:24 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:24 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 265.958807][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 265.965734][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 265.976285][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:24 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 265.986366][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 266.030436][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 266.038075][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 266.676416][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 266.677639][ T5197] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 266.695269][ T4553] Bluetooth: hci1: ACL packet for unknown connection handle 0 02:08:25 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:25 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:25 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:25 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) [ 266.695346][ T4553] Bluetooth: hci1: wrong event for mode 0 02:08:25 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 266.695525][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 266.703294][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x110, r4, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x103) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x10001, 0x20a001) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff}, 0x80) r10 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "739801f8f0de100b7a25f7d1d56f1fe9f1288d3852416ed0f0542a9265149724d7de4f793ee8cdd812c167d9b2a8eea1509e123796cdbc444a9d9f5f364adcd6"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000340), 0x48000, 0xcfe063793c3a209a) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r12, 0x0, 0x0) ptrace$peeksig(0x2, r12, &(0x7f00000001c0)={0x81, 0x1, 0x3}, &(0x7f00000003c0)=[{}, {}, {}]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003e40)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000003f40)=0xe4) r14 = openat$ipvs(0xffffff9c, &(0x7f0000003f80)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="f93531d9db3a047fae43425e33e050001cf9a5a78a1971e8800929d13ca79041222fc073ba7667c77246eeaa2436687a05a4aa2b3e9436c6ed1832a215cdda3702a186b3f082ddc63e08623a6e6a2edd81b73340d4ff13a06989a9381e3273492b721d1570434b0802b99ae4bb6cd86f1f92325c37eaf8c0512857170826ef7048ccc1688eb7df", 0x87}, {&(0x7f0000000140)="23486843a4e2d98c580782f80464c4da5da3ee88b05d0b8298b8d796f9a4f73009b65c61f7432fe7e070947bdf939e43", 0x30}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="3ff0ee8ed0d2d2ed4b86b71037a4b625348b709044382f523a4ce2df7addf1c232887321d1512962335ca16846c87f19e6587a8a37d4060abb807107c64583c02ea9562c531211328de29d9e735b0778feed9e9921254701", 0x58}, {&(0x7f0000001540)="10a17f61e05784fd5ad79a2b0b7c949364dfb0c3966978a8d41655150098e0780d4eac805eb1ce7e13a114ca869c7815661e49c18ea0c3acc1327bf69963d4b0168ec4fe1ddd0f2a00e13cd7bf7767d371a1052976d595c391d0c7080ed0c8", 0x5f}, {&(0x7f00000015c0)="e704b2463673e5e6123e4494fa1a695342d35937906576cfeecc5e68d3bc59447d7728c47e0d4f7de9298da7d045be5266e611ec590aa3b903caa56069dcee23be21e1c347e4f4fe509fe5c466bdb1ffd315ae72577358ffb33caaa3bbc0a5da19fa4e8d9430d7892560ebce609dda324d659eeada080217a89df2d24cd3453ee1a451d3b02b6e092fbdf72ab9561b963cff650640482c9cdd", 0x99}], 0x6, &(0x7f0000001680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r7, r8, r9, r11, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r12, 0xee00}}}], 0x70}}, {{&(0x7f0000001740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f00000017c0)="66d2d5383ccc2461a2b83ae43bfe19be36eae564352da75ba15750b33b667af645b572f2022f789fb1e3eb40e13930d40a67ba633b589f077130853f196b2dc19fb81163d2d3cfe6b48b03c0386062d947", 0x51}, {&(0x7f0000001840)="094cccbd0bf21a2bc6950bcd6e1f0a8a60e58fa36999b8d7e1117a4a0679f64e70250ba4ed19f7eba3a3f7638df42c53d3fa93a3434ef6bf75462260177bd55f9b98593ed67b03b6c6f55a3afaa86e26b1e687e4ba01230a266c0adddc832f955dc65e29a396c736b576dba118b5894cab973b414e86dda39cc042457171d22e899c7f9af8ede96148f9f143edfbb1579790985dee50042e3d53235a5372ff6deaf8aa614c75a9ca0f2393ee", 0xac}, {&(0x7f0000001900)="94d28e14530fe4c98728fbd8e3e8794c22170947454c28a097873f5123f997f13cd909e21a99ad0b4f288d21cb27930aa41cb6df9207e56027cbc48c1d3d128727e0d1a620320246880a45cc0f9fc0cf84b9ca2e87bd0f63f730c3d85776e009c2ecf0e43f6847dede884fa2076ac7a4b68a02d87f6a8cf8f87505a22f2e1fbc678c78d1941de87a8536595b9d415a185e926785f590081cee", 0x99}, {&(0x7f00000019c0)="07e646711a01ed09ca2aa298961174741b58764cc1a675c5c642d760677ac9c804a64da19cba3254a600679b23ae7fd9800861dcd34819927e2e5a2661977b3c2ae69329214715e778b74fde1b61b5ef4ac7ad99157fe2a7e0b34eab902703ac97c312d1be1b7d2df2f62576470248180875aa0692f3903966dfeabb9e06302cf8cd3b89647745dd72f71b2bc0ee7609a0f6b94ef3775c524ffb57d24aba9042", 0xa0}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="ab40cd3d536ad5f22ae8147dd523fff7cc77fac847a4517b299577f0bfb552318171d5e306d953d3f7ea6a676c24323fe131b10b109961b2e39131ded07bce36b9780ba19e80c5776008470bb84afd4c53ec3ac3d1bb911eb946189116c484d6379130dccc316bf2ce02fdc9992d4160a1aa513e97c6b39d7c70", 0x7a}, {&(0x7f0000002b00)="4c5400c001ce5faa15202d947a5f63e41067e7d50e44816dacb205ab31386441b688a653d9d408db77f659dfb732448090d554e7fcff320191588a2902823c273e5770e019af54001055c81311948e1fdad62f04b852dee73eaa786702414329ad1990728c383481f49eaf9e55fa87d30de171122e2bd64e832502380496ec6f5a86a87622588afc36d99cf4ed19b2c13995feabacdda06303b2cbc63ee702f086ef75c870fa7362cff1d14837ef0f29c8fccfb8b9b275feee11ee7bdd2c610f404fe909d2a4f7edc849e6566eb1b911", 0xd0}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="14f600fa9142ed1c6143db582147eabb9567081e361ba5daf684865b747d96ea6389d13af73cc1ca52b50824b4e9b20b01c77740d87975f79cea1fee43fa4de47b881a777b60c2439df91129913186e178d63c8353499114abf8f64a5277a3772ef6fc93174b39ab5159e0b11b1c1cc03a043fe503692babb56dc75ddf0e90d89cb8f5ea3cd60f3ebd85530b945b8a79b743f2e777f84925247f1fb27114a796ce2592d4a651f9f5f9c4321cbd9745f62bf73d11354e8941d7f604b69fee940e198ccd2bae53633f16ccc247f0765754ecbf7146981e774fcd05afc9786f30b9f70ba9", 0xe3}, {&(0x7f0000003d00)="02d39ce76bb2ba34c96621ae373f2fbcdf01eb0a09d0c55294deebe2da36b7babd21e2c200fa8b20b9cc5f4b4a745a64722aa5e3326e70d4878283608883ac63e9948b5efed22c91ca77b756f7d33662f292cf3fbb4a8f2e857adc00493869d59631039b020e535ba3fe7b289ef35d84a7217e519ff23bc367c507e743b0ce7b43d3d9e4004efba7a13e50bce1dd2988946114e92a766f196108fd41a1cd22d127934843237d", 0xa6}], 0xa, &(0x7f0000003fc0)=[@cred={{0x18, 0x1, 0x2, {0x0, r13, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r14, r6]}}], 0x30, 0x4}}], 0x2, 0x4000801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000280)) sendmmsg$inet6(r5, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) [ 266.706472][ T5197] Bluetooth: hci2: wrong event for mode 0 02:08:25 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 266.738969][ T63] Bluetooth: hci3: wrong event for mode 0 [ 266.747572][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 266.751323][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 266.756694][ T63] Bluetooth: hci2: wrong event for mode 0 02:08:25 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 266.770711][ T5196] Bluetooth: hci0: wrong event for mode 0 02:08:25 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 266.794342][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:25 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 266.801000][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 266.825440][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 266.831674][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 266.838018][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:25 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 266.846078][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 266.874657][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 266.880721][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:25 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) 02:08:25 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 266.964762][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 266.972209][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 266.991448][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 266.998218][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 267.036838][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.042828][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 02:08:26 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.610227][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.615586][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 267.619123][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 267.646610][ T63] Bluetooth: hci3: wrong event for mode 0 [ 267.652973][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.660867][ T63] Bluetooth: hci2: wrong event for mode 0 [ 267.671445][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 267.674507][ T4553] Bluetooth: hci1: ACL packet for unknown connection handle 0 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.677856][ T63] Bluetooth: hci0: wrong event for mode 0 [ 267.686156][ T4553] Bluetooth: hci1: wrong event for mode 0 [ 267.714608][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 267.721880][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 267.722693][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.729696][ T63] Bluetooth: hci0: wrong event for mode 0 [ 267.767283][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 267.774066][ T63] Bluetooth: hci2: wrong event for mode 0 02:08:26 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.880298][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.886462][ T63] Bluetooth: hci2: wrong event for mode 0 [ 267.891587][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 267.909616][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 267.916497][ T4553] Bluetooth: hci0: wrong event for mode 0 [ 267.919076][ T63] Bluetooth: hci2: wrong event for mode 0 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.932998][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 267.939327][ T63] Bluetooth: hci1: wrong event for mode 0 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.951719][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 267.957891][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 267.958273][ T63] Bluetooth: hci3: wrong event for mode 0 [ 267.964792][ T4553] Bluetooth: hci0: wrong event for mode 0 [ 267.967565][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 267.969612][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:26 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.008296][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 268.014781][ T4553] Bluetooth: hci0: wrong event for mode 0 [ 268.017404][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 268.026488][ T63] Bluetooth: hci2: wrong event for mode 0 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.041413][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 268.047299][ T63] Bluetooth: hci1: wrong event for mode 0 [ 268.053868][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 268.059836][ T63] Bluetooth: hci2: wrong event for mode 0 02:08:26 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:26 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.134929][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 268.139382][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.141117][ T5196] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 268.142016][ T63] Bluetooth: hci0: wrong event for mode 0 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.142626][ T5196] Bluetooth: hci1: wrong event for mode 0 [ 268.147636][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:26 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.180652][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 268.187317][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:26 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.194368][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.202728][ T4553] Bluetooth: hci0: wrong event for mode 0 [ 268.219699][ T4553] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 268.220369][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 268.225641][ T4553] Bluetooth: hci1: wrong event for mode 0 [ 268.236573][ T63] Bluetooth: hci2: wrong event for mode 0 [ 268.249546][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:26 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.257515][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:26 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.257917][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 268.265337][ T63] Bluetooth: hci0: wrong event for mode 0 02:08:26 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.302073][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 268.309644][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 268.315979][ T63] Bluetooth: hci3: wrong event for mode 0 02:08:27 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:27 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.319966][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 268.328495][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 268.331975][ T63] Bluetooth: hci0: wrong event for mode 0 02:08:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x110, r4, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x103) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x10001, 0x20a001) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff}, 0x80) r10 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "739801f8f0de100b7a25f7d1d56f1fe9f1288d3852416ed0f0542a9265149724d7de4f793ee8cdd812c167d9b2a8eea1509e123796cdbc444a9d9f5f364adcd6"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000340), 0x48000, 0xcfe063793c3a209a) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r12, 0x0, 0x0) ptrace$peeksig(0x2, r12, &(0x7f00000001c0)={0x81, 0x1, 0x3}, &(0x7f00000003c0)=[{}, {}, {}]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003e40)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000003f40)=0xe4) r14 = openat$ipvs(0xffffff9c, &(0x7f0000003f80)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="f93531d9db3a047fae43425e33e050001cf9a5a78a1971e8800929d13ca79041222fc073ba7667c77246eeaa2436687a05a4aa2b3e9436c6ed1832a215cdda3702a186b3f082ddc63e08623a6e6a2edd81b73340d4ff13a06989a9381e3273492b721d1570434b0802b99ae4bb6cd86f1f92325c37eaf8c0512857170826ef7048ccc1688eb7df", 0x87}, {&(0x7f0000000140)="23486843a4e2d98c580782f80464c4da5da3ee88b05d0b8298b8d796f9a4f73009b65c61f7432fe7e070947bdf939e43", 0x30}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="3ff0ee8ed0d2d2ed4b86b71037a4b625348b709044382f523a4ce2df7addf1c232887321d1512962335ca16846c87f19e6587a8a37d4060abb807107c64583c02ea9562c531211328de29d9e735b0778feed9e9921254701", 0x58}, {&(0x7f0000001540)="10a17f61e05784fd5ad79a2b0b7c949364dfb0c3966978a8d41655150098e0780d4eac805eb1ce7e13a114ca869c7815661e49c18ea0c3acc1327bf69963d4b0168ec4fe1ddd0f2a00e13cd7bf7767d371a1052976d595c391d0c7080ed0c8", 0x5f}, {&(0x7f00000015c0)="e704b2463673e5e6123e4494fa1a695342d35937906576cfeecc5e68d3bc59447d7728c47e0d4f7de9298da7d045be5266e611ec590aa3b903caa56069dcee23be21e1c347e4f4fe509fe5c466bdb1ffd315ae72577358ffb33caaa3bbc0a5da19fa4e8d9430d7892560ebce609dda324d659eeada080217a89df2d24cd3453ee1a451d3b02b6e092fbdf72ab9561b963cff650640482c9cdd", 0x99}], 0x6, &(0x7f0000001680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r7, r8, r9, r11, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r12, 0xee00}}}], 0x70}}, {{&(0x7f0000001740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f00000017c0)="66d2d5383ccc2461a2b83ae43bfe19be36eae564352da75ba15750b33b667af645b572f2022f789fb1e3eb40e13930d40a67ba633b589f077130853f196b2dc19fb81163d2d3cfe6b48b03c0386062d947", 0x51}, {&(0x7f0000001840)="094cccbd0bf21a2bc6950bcd6e1f0a8a60e58fa36999b8d7e1117a4a0679f64e70250ba4ed19f7eba3a3f7638df42c53d3fa93a3434ef6bf75462260177bd55f9b98593ed67b03b6c6f55a3afaa86e26b1e687e4ba01230a266c0adddc832f955dc65e29a396c736b576dba118b5894cab973b414e86dda39cc042457171d22e899c7f9af8ede96148f9f143edfbb1579790985dee50042e3d53235a5372ff6deaf8aa614c75a9ca0f2393ee", 0xac}, {&(0x7f0000001900)="94d28e14530fe4c98728fbd8e3e8794c22170947454c28a097873f5123f997f13cd909e21a99ad0b4f288d21cb27930aa41cb6df9207e56027cbc48c1d3d128727e0d1a620320246880a45cc0f9fc0cf84b9ca2e87bd0f63f730c3d85776e009c2ecf0e43f6847dede884fa2076ac7a4b68a02d87f6a8cf8f87505a22f2e1fbc678c78d1941de87a8536595b9d415a185e926785f590081cee", 0x99}, {&(0x7f00000019c0)="07e646711a01ed09ca2aa298961174741b58764cc1a675c5c642d760677ac9c804a64da19cba3254a600679b23ae7fd9800861dcd34819927e2e5a2661977b3c2ae69329214715e778b74fde1b61b5ef4ac7ad99157fe2a7e0b34eab902703ac97c312d1be1b7d2df2f62576470248180875aa0692f3903966dfeabb9e06302cf8cd3b89647745dd72f71b2bc0ee7609a0f6b94ef3775c524ffb57d24aba9042", 0xa0}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="ab40cd3d536ad5f22ae8147dd523fff7cc77fac847a4517b299577f0bfb552318171d5e306d953d3f7ea6a676c24323fe131b10b109961b2e39131ded07bce36b9780ba19e80c5776008470bb84afd4c53ec3ac3d1bb911eb946189116c484d6379130dccc316bf2ce02fdc9992d4160a1aa513e97c6b39d7c70", 0x7a}, {&(0x7f0000002b00)="4c5400c001ce5faa15202d947a5f63e41067e7d50e44816dacb205ab31386441b688a653d9d408db77f659dfb732448090d554e7fcff320191588a2902823c273e5770e019af54001055c81311948e1fdad62f04b852dee73eaa786702414329ad1990728c383481f49eaf9e55fa87d30de171122e2bd64e832502380496ec6f5a86a87622588afc36d99cf4ed19b2c13995feabacdda06303b2cbc63ee702f086ef75c870fa7362cff1d14837ef0f29c8fccfb8b9b275feee11ee7bdd2c610f404fe909d2a4f7edc849e6566eb1b911", 0xd0}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="14f600fa9142ed1c6143db582147eabb9567081e361ba5daf684865b747d96ea6389d13af73cc1ca52b50824b4e9b20b01c77740d87975f79cea1fee43fa4de47b881a777b60c2439df91129913186e178d63c8353499114abf8f64a5277a3772ef6fc93174b39ab5159e0b11b1c1cc03a043fe503692babb56dc75ddf0e90d89cb8f5ea3cd60f3ebd85530b945b8a79b743f2e777f84925247f1fb27114a796ce2592d4a651f9f5f9c4321cbd9745f62bf73d11354e8941d7f604b69fee940e198ccd2bae53633f16ccc247f0765754ecbf7146981e774fcd05afc9786f30b9f70ba9", 0xe3}, {&(0x7f0000003d00)="02d39ce76bb2ba34c96621ae373f2fbcdf01eb0a09d0c55294deebe2da36b7babd21e2c200fa8b20b9cc5f4b4a745a64722aa5e3326e70d4878283608883ac63e9948b5efed22c91ca77b756f7d33662f292cf3fbb4a8f2e857adc00493869d59631039b020e535ba3fe7b289ef35d84a7217e519ff23bc367c507e743b0ce7b43d3d9e4004efba7a13e50bce1dd2988946114e92a766f196108fd41a1cd22d127934843237d", 0xa6}], 0xa, &(0x7f0000003fc0)=[@cred={{0x18, 0x1, 0x2, {0x0, r13, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r14, r6]}}], 0x30, 0x4}}], 0x2, 0x4000801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000280)) sendmmsg$inet6(r5, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) 02:08:27 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.370950][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 268.376272][ T63] Bluetooth: hci2: wrong event for mode 0 [ 268.382391][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 268.388115][ T63] Bluetooth: hci3: wrong event for mode 0 02:08:27 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.421513][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 268.427628][ T63] Bluetooth: hci0: wrong event for mode 0 [ 268.437840][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 268.444342][ T63] Bluetooth: hci2: wrong event for mode 0 02:08:27 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:27 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.472961][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 268.481571][ T4553] Bluetooth: hci0: wrong event for mode 0 02:08:27 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.521558][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 268.538803][ T4553] Bluetooth: hci0: wrong event for mode 0 [ 268.544627][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 268.549519][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:27 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:27 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 268.588825][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 268.595513][ T4553] Bluetooth: hci0: wrong event for mode 0 [ 268.622533][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 268.630521][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:27 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:27 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:27 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:27 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.234208][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.237424][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.246991][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.249944][ T63] bt_warn_ratelimited: 67 callbacks suppressed [ 269.249956][ T63] Bluetooth: hci0: unexpected event 0x48 length: 9 > 3 [ 269.255148][ T4553] Bluetooth: hci3: unexpected event 0x48 length: 9 > 3 [ 269.256450][ T5196] Bluetooth: hci2: unexpected event 0x48 length: 9 > 3 [ 269.256479][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 269.260577][ T63] Bluetooth: hci0: wrong event for mode 0 [ 269.267093][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 269.280886][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 269.303963][ T63] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 02:08:27 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:27 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) [ 269.303993][ T63] Bluetooth: hci1: wrong event for mode 0 syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.340974][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.341022][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.349808][ T4553] Bluetooth: hci3: unexpected event 0x48 length: 9 > 3 [ 269.356730][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 269.356912][ T63] Bluetooth: hci2: unexpected event 0x48 length: 9 > 3 [ 269.367917][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.368993][ T63] Bluetooth: hci2: wrong event for mode 0 [ 269.375367][ T4553] Bluetooth: hci3: unexpected event 0x48 length: 9 > 3 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.387343][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 269.395220][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 269.401012][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.407045][ T63] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 269.407073][ T63] Bluetooth: hci1: wrong event for mode 0 [ 269.425648][ T5196] Bluetooth: hci0: unexpected event 0x48 length: 9 > 3 [ 269.425682][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 269.436744][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.443547][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.444678][ T63] Bluetooth: hci2: unexpected event 0x48 length: 9 > 3 [ 269.450341][ T63] Bluetooth: hci2: wrong event for mode 0 [ 269.450718][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.481675][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.488693][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.488984][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 269.494606][ T63] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.517805][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.523454][ T63] Bluetooth: hci2: wrong event for mode 0 [ 269.539631][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.546205][ T63] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.558315][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.566168][ T63] Bluetooth: hci2: wrong event for mode 0 [ 269.571003][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.578294][ T63] Bluetooth: hci3: wrong event for mode 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000940)={r1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.597941][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.604314][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 269.606867][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 269.615217][ T63] Bluetooth: hci1: wrong event for mode 0 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002340)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="955b2edc3a78b5ed4e6cde440c026c6f7d564fd23050fc27ecbaff4fc2e0a11785a3dd3acb05e48c0449feb1699cc987105b7b5ea7a0106ddc4226cc77aa0b8e00e3311ff8b790d6965f8ffdc026f10384c9492b7c79021f33af475ca7b72cbd87583c2ab3c6106fd9e4546c61b214e56e5ae9d0dd3b8578a09591c35e0388fd968d63059a6c2a7166dd28ddebacb0dfb9aab1caf9078429b3e3a850b469901a30ccc2fa9d37772aaef2001cdaf5544526b20afb913166a7aabd961358655684e2e7f7f49269f35b9c4a8dbc53f16ee3", 0xd0}, {&(0x7f0000003380)="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", 0x114}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="5f95f42f36c950b462d85946099e723b0d7d686d90ce07eed5b5c767c34822c255389a0d122b9028aad7f6dbf33605e5e02d1345ef3d020ddc573851e78cee81f88735575979ea09e8b083a09c78cb0ad723c37f16b1812514e2f8a195743af21b5ccb7c65b95a0057b9e9954eddb6d37b144a62ac5007", 0x77}, {&(0x7f0000000800)="0df30ffa9e0acd54d2fc5e69d59531bba6de6f63c5dc4f28e754fd9f84125101f83b9d64e57542dd149b476828dae16714159641eb85800c7b44dfea21ba290c017653bbb8a89ae1cb6074477565fa64665e2f3534ef2562a577c0333916f2cb29cf02823d0410712caf7dce71b33299074932133f6794f379016813d1603cae15d8293056776acbe06853", 0x8b}, {&(0x7f00000004c0)="eb9d1e9d6b74f1682bd47b7287d3e523938ed340ca31214c402d662c4c44ce1064ab6367d0041b3e947216ee7acea1e207db3930ff3be287cbd40dc834eefea54cf3255b4ef2c1130f4a9421bc612ce3a984085719d0011fbf610b41d29af61cbcafe34626205148de366eda329810ecd080a2230902573b3c036d740b53d7d9567e7ca64f2600caa3da208f9276e3a26990ab529fe3cf8fe771aa46681fc4b5637e8777d5a2", 0xa6}, {&(0x7f0000000740)="72408801d7f071cc03a2433630f03fee6628048dfedd82aab06797354562f583480965e20db7e059d78214ae6232360d9fd780e9b8f464859edecc0f4011642f6c175f77ee4e64f87faa26ce0041983e264e67093790a97a192d6ec26eb5b35a", 0x60}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="525d7f4182ef474521985883e66920a9047acaea0d168ebb03ca12f58b0c0e9d27ce9b10d988cbd28317a78f48e3a78078448105c2c1bbc4c75c96590fe837694f495db10e60b4318fd063323ea7f951d93279097c7fcb53ec3047ca6aeda6b3abf0c0f8e945d9975b1f1cec0f95d02a2ceea5425cd7482ab599f020ec046b5438c9d4", 0x83}, {&(0x7f0000000b80)="f20eb8a47692d44f304a564467cfb7a3e89cffb6f177733e815ff4f4d4206ecb46667dda7c30f5b5544244075ec89fc82fcc0c944167b986c1a4b96a2d512af1b9b57c9081297a174f95258f1b348cfb2616f5230403ba1b93adb6ed6a2428b688bf22c5859b91d1e21772287b65bc86e195dfac0d617153a0f14341dd5c81a979db2f2c8fb4927729df63bbb1f95129dbe464bf04cc744e94f42577029dcf30a91c8f44944417d74d3c04531bdfdfeaed7735eae8acaa8777199667be50a7a4c896fdf85cd13c97b30b77187e4bb0b3aca757ea1e56f351b644e5faeedb3560294f5c444918cc8aac07beecc25bee0501897aa2453d3e5773079907203e", 0xfe}, {&(0x7f0000000c80)="c9cdd9a2f37728406ec1add4282c6e55708b5ef49c939ef30a6ae6d7deb2590c78475255d5470326f2093b5cf3e5232fc4edf5af1fe5c216c682cc0935b910", 0x3f}], 0x3}}], 0x4, 0x2000c044) sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000001100)='./bus\x00', 0x14d27e, 0x0) fallocate(r2, 0x0, 0x0, 0x328b56f) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)}, 0x10161) [ 269.624881][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.630758][ T63] Bluetooth: hci2: wrong event for mode 0 [ 269.637068][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.643253][ T63] Bluetooth: hci3: wrong event for mode 0 [ 269.651333][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.657750][ T63] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.678277][ T39] audit: type=1800 audit(1681610908.368:8): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1153 res=0 errno=0 [ 269.701147][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.706350][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.708074][ T63] Bluetooth: hci2: wrong event for mode 0 [ 269.716616][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002340)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="955b2edc3a78b5ed4e6cde440c026c6f7d564fd23050fc27ecbaff4fc2e0a11785a3dd3acb05e48c0449feb1699cc987105b7b5ea7a0106ddc4226cc77aa0b8e00e3311ff8b790d6965f8ffdc026f10384c9492b7c79021f33af475ca7b72cbd87583c2ab3c6106fd9e4546c61b214e56e5ae9d0dd3b8578a09591c35e0388fd968d63059a6c2a7166dd28ddebacb0dfb9aab1caf9078429b3e3a850b469901a30ccc2fa9d37772aaef2001cdaf5544526b20afb913166a7aabd961358655684e2e7f7f49269f35b9c4a8dbc53f16ee3", 0xd0}, {&(0x7f0000003380)="cb0a966b58b85d94526d04efb1a7750ff6a1edca75e04c0246f46fcf70f67414ae9539ccbfe27b8fc7bee1202a1e6cb365e0182517f74e37cf53fdc250b10151b675aa5126c9da88d4121a91d78a8f8ac1a536b3b7e93fa03560696174d0c8852366b751b3a4b284fc19ebac33e899d561ce631585e79c993bc72347c27e73f7854c302b08fd2debbebefe2ebd536d0d3d2a036feb3378ae9e512cc76d404a0329744a8d11ee5665e00f92cd4eb8c3ef50c3af0e2b57baabcb79eea1b0aea587478d87b4fa1fd8125fbe63e507e18b67a8ef09f830115a3cc88abd6d6bcdd982cea39bb7add3cb9fe46dc096d53a0400d14c27b74d2faf3af7bae418cc0122acca0eaff55a4c264d191a7beab70232b772d66459", 0x114}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="5f95f42f36c950b462d85946099e723b0d7d686d90ce07eed5b5c767c34822c255389a0d122b9028aad7f6dbf33605e5e02d1345ef3d020ddc573851e78cee81f88735575979ea09e8b083a09c78cb0ad723c37f16b1812514e2f8a195743af21b5ccb7c65b95a0057b9e9954eddb6d37b144a62ac5007", 0x77}, {&(0x7f0000000800)="0df30ffa9e0acd54d2fc5e69d59531bba6de6f63c5dc4f28e754fd9f84125101f83b9d64e57542dd149b476828dae16714159641eb85800c7b44dfea21ba290c017653bbb8a89ae1cb6074477565fa64665e2f3534ef2562a577c0333916f2cb29cf02823d0410712caf7dce71b33299074932133f6794f379016813d1603cae15d8293056776acbe06853", 0x8b}, {&(0x7f00000004c0)="eb9d1e9d6b74f1682bd47b7287d3e523938ed340ca31214c402d662c4c44ce1064ab6367d0041b3e947216ee7acea1e207db3930ff3be287cbd40dc834eefea54cf3255b4ef2c1130f4a9421bc612ce3a984085719d0011fbf610b41d29af61cbcafe34626205148de366eda329810ecd080a2230902573b3c036d740b53d7d9567e7ca64f2600caa3da208f9276e3a26990ab529fe3cf8fe771aa46681fc4b5637e8777d5a2", 0xa6}, {&(0x7f0000000740)="72408801d7f071cc03a2433630f03fee6628048dfedd82aab06797354562f583480965e20db7e059d78214ae6232360d9fd780e9b8f464859edecc0f4011642f6c175f77ee4e64f87faa26ce0041983e264e67093790a97a192d6ec26eb5b35a", 0x60}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="525d7f4182ef474521985883e66920a9047acaea0d168ebb03ca12f58b0c0e9d27ce9b10d988cbd28317a78f48e3a78078448105c2c1bbc4c75c96590fe837694f495db10e60b4318fd063323ea7f951d93279097c7fcb53ec3047ca6aeda6b3abf0c0f8e945d9975b1f1cec0f95d02a2ceea5425cd7482ab599f020ec046b5438c9d4", 0x83}, {&(0x7f0000000b80)="f20eb8a47692d44f304a564467cfb7a3e89cffb6f177733e815ff4f4d4206ecb46667dda7c30f5b5544244075ec89fc82fcc0c944167b986c1a4b96a2d512af1b9b57c9081297a174f95258f1b348cfb2616f5230403ba1b93adb6ed6a2428b688bf22c5859b91d1e21772287b65bc86e195dfac0d617153a0f14341dd5c81a979db2f2c8fb4927729df63bbb1f95129dbe464bf04cc744e94f42577029dcf30a91c8f44944417d74d3c04531bdfdfeaed7735eae8acaa8777199667be50a7a4c896fdf85cd13c97b30b77187e4bb0b3aca757ea1e56f351b644e5faeedb3560294f5c444918cc8aac07beecc25bee0501897aa2453d3e5773079907203e", 0xfe}, {&(0x7f0000000c80)="c9cdd9a2f37728406ec1add4282c6e55708b5ef49c939ef30a6ae6d7deb2590c78475255d5470326f2093b5cf3e5232fc4edf5af1fe5c216c682cc0935b910", 0x3f}], 0x3}}], 0x4, 0x2000c044) (async) sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, 0x0, 0x0) (async) r2 = open(&(0x7f0000001100)='./bus\x00', 0x14d27e, 0x0) fallocate(r2, 0x0, 0x0, 0x328b56f) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)}, 0x10161) 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.759868][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.769004][ T5196] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.777740][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.787753][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 269.797025][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.803183][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 269.806692][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.816562][ T63] Bluetooth: hci2: wrong event for mode 0 [ 269.821201][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.829430][ T5196] Bluetooth: hci0: wrong event for mode 0 [ 269.829742][ T39] audit: type=1800 audit(1681610908.498:9): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1170 res=0 errno=0 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002340)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="955b2edc3a78b5ed4e6cde440c026c6f7d564fd23050fc27ecbaff4fc2e0a11785a3dd3acb05e48c0449feb1699cc987105b7b5ea7a0106ddc4226cc77aa0b8e00e3311ff8b790d6965f8ffdc026f10384c9492b7c79021f33af475ca7b72cbd87583c2ab3c6106fd9e4546c61b214e56e5ae9d0dd3b8578a09591c35e0388fd968d63059a6c2a7166dd28ddebacb0dfb9aab1caf9078429b3e3a850b469901a30ccc2fa9d37772aaef2001cdaf5544526b20afb913166a7aabd961358655684e2e7f7f49269f35b9c4a8dbc53f16ee3", 0xd0}, {&(0x7f0000003380)="cb0a966b58b85d94526d04efb1a7750ff6a1edca75e04c0246f46fcf70f67414ae9539ccbfe27b8fc7bee1202a1e6cb365e0182517f74e37cf53fdc250b10151b675aa5126c9da88d4121a91d78a8f8ac1a536b3b7e93fa03560696174d0c8852366b751b3a4b284fc19ebac33e899d561ce631585e79c993bc72347c27e73f7854c302b08fd2debbebefe2ebd536d0d3d2a036feb3378ae9e512cc76d404a0329744a8d11ee5665e00f92cd4eb8c3ef50c3af0e2b57baabcb79eea1b0aea587478d87b4fa1fd8125fbe63e507e18b67a8ef09f830115a3cc88abd6d6bcdd982cea39bb7add3cb9fe46dc096d53a0400d14c27b74d2faf3af7bae418cc0122acca0eaff55a4c264d191a7beab70232b772d66459", 0x114}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)="5f95f42f36c950b462d85946099e723b0d7d686d90ce07eed5b5c767c34822c255389a0d122b9028aad7f6dbf33605e5e02d1345ef3d020ddc573851e78cee81f88735575979ea09e8b083a09c78cb0ad723c37f16b1812514e2f8a195743af21b5ccb7c65b95a0057b9e9954eddb6d37b144a62ac5007", 0x77}, {&(0x7f0000000800)="0df30ffa9e0acd54d2fc5e69d59531bba6de6f63c5dc4f28e754fd9f84125101f83b9d64e57542dd149b476828dae16714159641eb85800c7b44dfea21ba290c017653bbb8a89ae1cb6074477565fa64665e2f3534ef2562a577c0333916f2cb29cf02823d0410712caf7dce71b33299074932133f6794f379016813d1603cae15d8293056776acbe06853", 0x8b}, {&(0x7f00000004c0)="eb9d1e9d6b74f1682bd47b7287d3e523938ed340ca31214c402d662c4c44ce1064ab6367d0041b3e947216ee7acea1e207db3930ff3be287cbd40dc834eefea54cf3255b4ef2c1130f4a9421bc612ce3a984085719d0011fbf610b41d29af61cbcafe34626205148de366eda329810ecd080a2230902573b3c036d740b53d7d9567e7ca64f2600caa3da208f9276e3a26990ab529fe3cf8fe771aa46681fc4b5637e8777d5a2", 0xa6}, {&(0x7f0000000740)="72408801d7f071cc03a2433630f03fee6628048dfedd82aab06797354562f583480965e20db7e059d78214ae6232360d9fd780e9b8f464859edecc0f4011642f6c175f77ee4e64f87faa26ce0041983e264e67093790a97a192d6ec26eb5b35a", 0x60}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="525d7f4182ef474521985883e66920a9047acaea0d168ebb03ca12f58b0c0e9d27ce9b10d988cbd28317a78f48e3a78078448105c2c1bbc4c75c96590fe837694f495db10e60b4318fd063323ea7f951d93279097c7fcb53ec3047ca6aeda6b3abf0c0f8e945d9975b1f1cec0f95d02a2ceea5425cd7482ab599f020ec046b5438c9d4", 0x83}, {&(0x7f0000000b80)="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", 0xfe}, {&(0x7f0000000c80)="c9cdd9a2f37728406ec1add4282c6e55708b5ef49c939ef30a6ae6d7deb2590c78475255d5470326f2093b5cf3e5232fc4edf5af1fe5c216c682cc0935b910", 0x3f}], 0x3}}], 0x4, 0x2000c044) (async) sendto$inet(r1, &(0x7f0000000140)="e9", 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000001100)='./bus\x00', 0x14d27e, 0x0) fallocate(r2, 0x0, 0x0, 0x328b56f) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) (async) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)}, 0x10161) 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.870395][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.874936][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.876697][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 269.881511][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.915119][ T39] audit: type=1800 audit(1681610908.598:10): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1170 res=0 errno=0 [ 269.917186][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.925167][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.925246][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:28 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.931581][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 269.931750][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 269.965193][ T4553] Bluetooth: hci0: wrong event for mode 0 [ 269.974184][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 269.976421][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.984840][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 269.992749][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 269.994246][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 269.994508][ T63] Bluetooth: hci1: wrong event for mode 0 [ 270.012296][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.024531][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 270.030391][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 270.043123][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 270.047084][ T5196] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.060637][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1, @loopback={0xfc}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x0, 0x1, 0x4, 0x8073, 0x5}, 0x20) r1 = socket$inet6(0xa, 0x5, 0x80000001) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x50, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0x1c) [ 270.067408][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.074718][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.089547][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 270.098708][ T4553] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.124112][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 270.132528][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 270.137633][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.139616][ T5810] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 270.146974][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.158498][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.170639][ T4553] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.194820][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1, @loopback={0xfc}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x0, 0x1, 0x4, 0x8073, 0x5}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x0, 0x1, 0x4, 0x8073, 0x5}, 0x20) r1 = socket$inet6(0xa, 0x5, 0x80000001) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x50, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0x1c) [ 270.199881][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.202194][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:28 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.225714][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 270.226523][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 270.236404][ T4553] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.268227][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.273618][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:28 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.274963][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 270.283932][ T5196] Bluetooth: hci0: wrong event for mode 0 02:08:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1, @loopback={0xfc}}, 0x1c) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x0, 0x1, 0x4, 0x8073, 0x5}, 0x20) r1 = socket$inet6(0xa, 0x5, 0x80000001) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x50, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0x1c) [ 270.287581][ T5825] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 270.287639][ T5828] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 270.314138][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:29 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.320679][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 270.328387][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.334454][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 270.334891][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 270.347703][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 270.349127][ T5838] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 02:08:29 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.367052][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:29 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.380714][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.387404][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.405005][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 270.409688][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 270.416825][ T4553] Bluetooth: hci1: ACL packet for unknown connection handle 0 02:08:29 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.424584][ T4553] Bluetooth: hci1: wrong event for mode 0 [ 270.444995][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.451732][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 270.453589][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0x208e24b) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6vti={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x0, 0x4, @private0}, @vti_common_policy=[@IFLA_VTI_OKEY={0x0, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x100}, @IFLA_VTI_OKEY={0x0, 0x3, 0xfff}, @IFLA_VTI_OKEY={0x0, 0x3, 0x204c}, @IFLA_VTI_IKEY={0x0, 0x2, 0x3ff}, @IFLA_VTI_LINK={0x0, 0x1, r5}, @IFLA_VTI_OKEY={0x0, 0x3, 0x3}, @IFLA_VTI_LINK={0x0, 0x1, r8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0xffff7fff}], @vti_common_policy=[@IFLA_VTI_IKEY={0x0, 0x2, 0x9}, @IFLA_VTI_OKEY, @IFLA_VTI_IKEY={0x0, 0x2, 0x16}, @IFLA_VTI_LINK={0x0, 0x1, r5}, @IFLA_VTI_LINK={0x0, 0x1, r4}, @IFLA_VTI_IKEY={0x0, 0x2, 0x8}, @IFLA_VTI_IKEY={0x0, 0x2, 0x42ed}, @IFLA_VTI_LINK={0x0, 0x1, r14}, @IFLA_VTI_LINK={0x0, 0x1, r11}], @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 02:08:29 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.476965][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.494890][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 270.502637][ T4553] Bluetooth: hci0: ACL packet for unknown connection handle 0 02:08:29 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.528736][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:29 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.572404][ T5196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 270.572466][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.588709][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:29 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 270.606256][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 270.613332][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 270.654122][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 270.661820][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0x208e24b) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) socket(0x1, 0x803, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6vti={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x0, 0x4, @private0}, @vti_common_policy=[@IFLA_VTI_OKEY={0x0, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x100}, @IFLA_VTI_OKEY={0x0, 0x3, 0xfff}, @IFLA_VTI_OKEY={0x0, 0x3, 0x204c}, @IFLA_VTI_IKEY={0x0, 0x2, 0x3ff}, @IFLA_VTI_LINK={0x0, 0x1, r5}, @IFLA_VTI_OKEY={0x0, 0x3, 0x3}, @IFLA_VTI_LINK={0x0, 0x1, r8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0xffff7fff}], @vti_common_policy=[@IFLA_VTI_IKEY={0x0, 0x2, 0x9}, @IFLA_VTI_OKEY, @IFLA_VTI_IKEY={0x0, 0x2, 0x16}, @IFLA_VTI_LINK={0x0, 0x1, r5}, @IFLA_VTI_LINK={0x0, 0x1, r4}, @IFLA_VTI_IKEY={0x0, 0x2, 0x8}, @IFLA_VTI_IKEY={0x0, 0x2, 0x42ed}, @IFLA_VTI_LINK={0x0, 0x1, r14}, @IFLA_VTI_LINK={0x0, 0x1, r11}], @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6vti={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x0, 0x4, @private0}, @vti_common_policy=[@IFLA_VTI_OKEY={0x0, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x100}, @IFLA_VTI_OKEY={0x0, 0x3, 0xfff}, @IFLA_VTI_OKEY={0x0, 0x3, 0x204c}, @IFLA_VTI_IKEY={0x0, 0x2, 0x3ff}, @IFLA_VTI_LINK={0x0, 0x1, r5}, @IFLA_VTI_OKEY={0x0, 0x3, 0x3}, @IFLA_VTI_LINK={0x0, 0x1, r8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0xffff7fff}], @vti_common_policy=[@IFLA_VTI_IKEY={0x0, 0x2, 0x9}, @IFLA_VTI_OKEY, @IFLA_VTI_IKEY={0x0, 0x2, 0x16}, @IFLA_VTI_LINK={0x0, 0x1, r5}, @IFLA_VTI_LINK={0x0, 0x1, r4}, @IFLA_VTI_IKEY={0x0, 0x2, 0x8}, @IFLA_VTI_IKEY={0x0, 0x2, 0x42ed}, @IFLA_VTI_LINK={0x0, 0x1, r14}, @IFLA_VTI_LINK={0x0, 0x1, r11}], @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 02:08:29 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.134396][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.136595][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.148790][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 271.154807][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:29 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:29 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.189997][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.197488][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:29 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.208699][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 271.216410][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 271.240740][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.246450][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0x208e24b) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6vti={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x0, 0x4, @private0}, @vti_common_policy=[@IFLA_VTI_OKEY={0x0, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x100}, @IFLA_VTI_OKEY={0x0, 0x3, 0xfff}, @IFLA_VTI_OKEY={0x0, 0x3, 0x204c}, @IFLA_VTI_IKEY={0x0, 0x2, 0x3ff}, @IFLA_VTI_LINK={0x0, 0x1, r5}, @IFLA_VTI_OKEY={0x0, 0x3, 0x3}, @IFLA_VTI_LINK={0x0, 0x1, r8}, @IFLA_VTI_FWMARK={0x0, 0x6, 0xffff7fff}], @vti_common_policy=[@IFLA_VTI_IKEY={0x0, 0x2, 0x9}, @IFLA_VTI_OKEY, @IFLA_VTI_IKEY={0x0, 0x2, 0x16}, @IFLA_VTI_LINK={0x0, 0x1, r5}, @IFLA_VTI_LINK={0x0, 0x1, r4}, @IFLA_VTI_IKEY={0x0, 0x2, 0x8}, @IFLA_VTI_IKEY={0x0, 0x2, 0x42ed}, @IFLA_VTI_LINK={0x0, 0x1, r14}, @IFLA_VTI_LINK={0x0, 0x1, r11}], @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 02:08:30 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.392204][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:30 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.399655][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.407024][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:30 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.435496][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:30 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.456865][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.462902][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 271.488724][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:30 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.530137][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.531866][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 271.536940][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 271.544408][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:30 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.572860][ T4553] Bluetooth: hci1: wrong event for mode 0 [ 271.590982][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 271.597499][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:30 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.619054][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.631031][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:30 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.642091][ T4553] Bluetooth: hci1: ACL packet for unknown connection handle 0 02:08:30 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8912, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x100) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7000fedbdf250a9f14552337dcaf00"/28], 0x1c}}, 0x0) fstat(r7, &(0x7f0000000240)) sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000600)) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e21, 0xe369, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000002380)='smaps\x00') [ 271.667677][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:30 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.697707][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 271.703906][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:30 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.713166][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:30 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:30 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.757302][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:30 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.761351][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:30 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 271.764754][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 271.772488][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 271.793117][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 271.799668][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 271.805605][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 271.812418][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 272.594695][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8912, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x100) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) (async) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7000fedbdf250a9f14552337dcaf00"/28], 0x1c}}, 0x0) fstat(r7, &(0x7f0000000240)) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6) (async) unshare(0x6c060000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000600)) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e21, 0xe369, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000002380)='smaps\x00') 02:08:31 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:31 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:31 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 272.594786][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:31 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 272.602332][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 272.622231][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:31 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x0) 02:08:31 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:31 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x0) [ 272.683200][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 272.689712][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 272.690735][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8912, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x100) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c7000fedbdf250a9f14552337dcaf00"/28], 0x1c}}, 0x0) fstat(r7, &(0x7f0000000240)) sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff5d, 0x0, 0x0, 0xfff6) unshare(0x6c060000) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000600)) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e21, 0xe369, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000002380)='smaps\x00') 02:08:31 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:31 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x0) [ 272.731435][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 272.743038][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:31 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:31 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 272.766806][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:31 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:31 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0x0, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 272.810038][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 272.817177][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 272.818104][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:31 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 272.839403][ T5196] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 272.859969][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 272.875423][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:33 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:33 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:33 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0x0, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:33 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.597018][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 274.600159][ T4553] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 274.602510][ T5196] bt_warn_ratelimited: 80 callbacks suppressed [ 274.602526][ T5196] Bluetooth: hci2: unexpected event 0x48 length: 9 > 3 02:08:33 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.602549][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 274.623104][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 274.632435][ T4553] Bluetooth: hci3: unexpected event 0x48 length: 9 > 3 [ 274.632480][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 274.663081][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:33 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0x0, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:33 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.663223][ T5196] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 274.669440][ T4553] Bluetooth: hci2: unexpected event 0x48 length: 9 > 3 [ 274.676340][ T4553] Bluetooth: hci2: wrong event for mode 0 [ 274.676515][ T5196] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 [ 274.691661][ T5196] Bluetooth: hci1: wrong event for mode 0 02:08:33 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 274.697508][ T4553] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 274.702385][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:33 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:33 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:33 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.715142][ T5196] Bluetooth: hci3: unexpected event 0x48 length: 9 > 3 [ 274.715162][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 274.734978][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 274.740776][ T5196] Bluetooth: hci2: unexpected event 0x48 length: 9 > 3 02:08:33 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.740804][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 274.766874][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 274.767540][ T4553] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 274.774087][ T5196] Bluetooth: hci3: unexpected event 0x48 length: 9 > 3 [ 274.779940][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 274.780340][ T4553] Bluetooth: hci1: unexpected event 0x48 length: 9 > 3 02:08:33 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.782102][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:33 executing program 3: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) fdatasync(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000500), 0x30c02, 0x0) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000540)=0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x3b, 0x400, 0x70bd26, 0x0, {0xb}}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="090328bd7000fedbdf2501"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x1b64b52263234dc7) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1f, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000) creat(&(0x7f0000000300)='./file0\x00', 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x4) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x240c2, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r10, &(0x7f0000001400)="bb", 0x1) sendfile(r10, r11, 0x0, 0x11f06) sendto$l2tp(r10, &(0x7f0000000340)="5d5f3129e152389b1b9040d08c60710e8fb93689bd59067884ef88014b3fd71dcb42cce42d92f20eace4b641e887ae5348e2dc5ff31915b5dcfb768ba6caad5b1344f2333220231549f8f8021d7dcc000e82b839dfceea4df10ba0834926", 0x5e, 0x4004000, &(0x7f00000002c0)={0x2, 0x0, @multicast2, 0x1}, 0x10) 02:08:33 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.782363][ T63] Bluetooth: hci2: unexpected event 0x48 length: 9 > 3 [ 274.782379][ T63] Bluetooth: hci2: wrong event for mode 0 [ 274.831266][ T4553] Bluetooth: hci1: wrong event for mode 0 02:08:33 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$uhid(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00122bbd7000fddbdf2501000000080001005e0000000c009900ffffff7f06000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x2, [0x1436, 0x9]}, &(0x7f0000000040)=0xc) [ 274.835041][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 274.845635][ T5196] Bluetooth: hci3: unexpected event 0x48 length: 9 > 3 [ 274.845675][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:33 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.877063][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 274.884163][ T5196] Bluetooth: hci2: wrong event for mode 0 02:08:33 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r1 = openat$uhid(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00122bbd7000fddbdf2501000000080001005e0000000c009900ffffff7f06000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x2, [0x1436, 0x9]}, &(0x7f0000000040)=0xc) 02:08:33 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.912324][ T6018] loop3: detected capacity change from 0 to 4096 [ 274.913259][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 274.924959][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:33 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.932980][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 274.940477][ T5196] Bluetooth: hci2: wrong event for mode 0 [ 274.944084][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:33 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 274.952401][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 274.975166][ T6018] NILFS (loop3): invalid segment: Checksum error in segment payload [ 274.984367][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 274.988029][ T6018] NILFS (loop3): trying rollback from an earlier position [ 274.990921][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 275.033137][ T6018] NILFS (loop3): recovery complete [ 275.043669][ T6036] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.137599][ T39] audit: type=1804 audit(1681610913.828:11): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2274960411/syzkaller.gOvrz1/42/file1/file0" dev="loop3" ino=12 res=1 errno=0 [ 275.192941][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.203895][ T39] audit: type=1804 audit(1681610913.898:12): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2274960411/syzkaller.gOvrz1/42/file1/file0" dev="loop3" ino=12 res=1 errno=0 [ 275.248485][ T39] audit: type=1804 audit(1681610913.938:13): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2274960411/syzkaller.gOvrz1/42/file1/file0" dev="loop3" ino=12 res=1 errno=0 02:08:33 executing program 3: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) fdatasync(r1) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000500), 0x30c02, 0x0) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000540)=0x2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x3b, 0x400, 0x70bd26, 0x0, {0xb}}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="090328bd7000fedbdf2501"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x1b64b52263234dc7) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1f, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000) (async) creat(&(0x7f0000000300)='./file0\x00', 0x4) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x4) (async) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x240c2, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r10, &(0x7f0000001400)="bb", 0x1) sendfile(r10, r11, 0x0, 0x11f06) (async) sendto$l2tp(r10, &(0x7f0000000340)="5d5f3129e152389b1b9040d08c60710e8fb93689bd59067884ef88014b3fd71dcb42cce42d92f20eace4b641e887ae5348e2dc5ff31915b5dcfb768ba6caad5b1344f2333220231549f8f8021d7dcc000e82b839dfceea4df10ba0834926", 0x5e, 0x4004000, &(0x7f00000002c0)={0x2, 0x0, @multicast2, 0x1}, 0x10) 02:08:33 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r1 = openat$uhid(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00122bbd7000fddbdf2501000000080001005e0000000c009900ffffff7f06000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x2, [0x1436, 0x9]}, &(0x7f0000000040)=0xc) 02:08:33 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:33 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 275.286239][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 275.291452][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 275.294762][ T4553] Bluetooth: hci2: wrong event for mode 0 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:34 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) [ 275.320434][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:34 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 275.367447][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 275.370791][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 275.405386][ T6054] loop3: detected capacity change from 0 to 4096 [ 275.432064][ T6054] NILFS (loop3): invalid segment: Checksum error in segment payload [ 275.441288][ T6054] NILFS (loop3): trying rollback from an earlier position [ 275.463131][ T6054] NILFS (loop3): recovery complete [ 275.470702][ T6056] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.522234][ T39] audit: type=1804 audit(1681610914.208:14): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2274960411/syzkaller.gOvrz1/43/file1/file0" dev="loop3" ino=12 res=1 errno=0 02:08:34 executing program 3: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) fdatasync(r1) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000500), 0x30c02, 0x0) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000540)=0x2) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x3b, 0x400, 0x70bd26, 0x0, {0xb}}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="090328bd7000fedbdf2501"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x1b64b52263234dc7) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1f, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1f, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000) creat(&(0x7f0000000300)='./file0\x00', 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x4) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x240c2, 0x0) (async) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x240c2, 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r10, &(0x7f0000001400)="bb", 0x1) (async) write(r10, &(0x7f0000001400)="bb", 0x1) sendfile(r10, r11, 0x0, 0x11f06) sendto$l2tp(r10, &(0x7f0000000340)="5d5f3129e152389b1b9040d08c60710e8fb93689bd59067884ef88014b3fd71dcb42cce42d92f20eace4b641e887ae5348e2dc5ff31915b5dcfb768ba6caad5b1344f2333220231549f8f8021d7dcc000e82b839dfceea4df10ba0834926", 0x5e, 0x4004000, &(0x7f00000002c0)={0x2, 0x0, @multicast2, 0x1}, 0x10) 02:08:34 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:34 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 275.586071][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:34 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) [ 275.612383][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:34 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r0, r0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 275.648990][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 275.676325][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 275.683855][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 275.711736][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 275.759362][ T6084] loop3: detected capacity change from 0 to 4096 [ 275.780081][ T6084] NILFS (loop3): invalid segment: Checksum error in segment payload [ 275.791237][ T6084] NILFS (loop3): trying rollback from an earlier position [ 275.813894][ T6084] NILFS (loop3): recovery complete [ 275.822016][ T6085] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.917862][ T39] audit: type=1804 audit(1681610914.608:15): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2274960411/syzkaller.gOvrz1/44/file1/file0" dev="loop3" ino=12 res=1 errno=0 [ 275.975160][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.997343][ T39] audit: type=1804 audit(1681610914.688:16): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2274960411/syzkaller.gOvrz1/44/file1/file0" dev="loop3" ino=12 res=1 errno=0 02:08:34 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:34 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r0, r0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.055509][ T39] audit: type=1804 audit(1681610914.738:17): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2274960411/syzkaller.gOvrz1/44/file1/file0" dev="loop3" ino=12 res=1 errno=0 02:08:34 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYBLOB="0009000014000100ff0200000000000000000000000000010800020000000000"], 0x38}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r1, &(0x7f0000019140)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x1e}, {&(0x7f000001a380)="77dc86607bba3b5624de1b24c3625894d78d8f044195e92e2f122509877dc6fac1b1f0222c976765c82e421465989181b2893cd5626624bca7657eb247012baf7d23bfd30471b75d6dab5e5a35a52237f84b9ee49f46353e8e754b84758e565d0423175de7fc35c283c613770995a7ced4d02050410ca8c6f1fa1f2c99294bedaa48c03db090df"}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="f800000016000000000000000000000000000000000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000000000000000000000000000000000ffffac1414aa000000000000000000000000000000000000000000000000000000000000000000000400"/176], 0xf8}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={{r4}, r3, 0xc, @unused=[0x87, 0x2000000004, 0x10001, 0x7fffffffffffffff], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{r2}, r3, 0x10, @unused=[0x3, 0x166, 0x24edff3e, 0x41c], @devid}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r3) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000100)={{r0}, r3, 0x2, @inherit={0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000003000000000000007f0000000000f0ff060000000000000001000000000000007f000000010400000000000000f70000ff7f000000000000030000000089000003000000000000000100008000000000ffffff7f00000000"]}, @subvolid=0x4}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000340)={{}, r3, 0x10, @unused=[0x401, 0xbda, 0x6, 0x1], @name="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"}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{}, r3, 0x8, @unused=[0x6, 0x20, 0x1ff, 0x100000001], @name="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"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000680)={{}, r3, 0x4, @unused=[0xbf, 0x8, 0x0, 0x7], @subvolid=0xfffffffffffffffd}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000dc0)={{}, r3, 0x2, @unused=[0x1, 0x6, 0xffffffffffffffff, 0x7557], @subvolid=0x3fffc0000}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 276.087790][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.091431][ T6091] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.100043][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 276.110310][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:34 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r0, r0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.120325][ T6091] gretap0: entered promiscuous mode [ 276.125560][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.148675][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 276.160739][ T6091] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.160772][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:34 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.182920][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 276.188318][ T6091] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.207878][ T6091] 0ªX: renamed from gretap0 02:08:34 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.220653][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 276.227381][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.239062][ T6091] 0ªX: left promiscuous mode [ 276.247120][ T6091] 0ªX: entered allmulticast mode [ 276.265322][ T6091] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 276.274808][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 276.309522][ T6091] syz-executor.1 (6091) used greatest stack depth: 21968 bytes left 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYBLOB="0009000014000100ff0200000000000000000000000000010800020000000000"], 0x38}}, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) (async) writev(r1, &(0x7f0000019140)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x1e}, {&(0x7f000001a380)="77dc86607bba3b5624de1b24c3625894d78d8f044195e92e2f122509877dc6fac1b1f0222c976765c82e421465989181b2893cd5626624bca7657eb247012baf7d23bfd30471b75d6dab5e5a35a52237f84b9ee49f46353e8e754b84758e565d0423175de7fc35c283c613770995a7ced4d02050410ca8c6f1fa1f2c99294bedaa48c03db090df"}], 0x1) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="f800000016000000000000000000000000000000000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000000000000000000000000000000000ffffac1414aa000000000000000000000000000000000000000000000000000000000000000000000400"/176], 0xf8}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={{r4}, r3, 0xc, @unused=[0x87, 0x2000000004, 0x10001, 0x7fffffffffffffff], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{r2}, r3, 0x10, @unused=[0x3, 0x166, 0x24edff3e, 0x41c], @devid}) (async, rerun: 32) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r3) (rerun: 32) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000100)={{r0}, r3, 0x2, @inherit={0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000003000000000000007f0000000000f0ff060000000000000001000000000000007f000000010400000000000000f70000ff7f000000000000030000000089000003000000000000000100008000000000ffffff7f00000000"]}, @subvolid=0x4}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000340)={{}, r3, 0x10, @unused=[0x401, 0xbda, 0x6, 0x1], @name="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"}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{}, r3, 0x8, @unused=[0x6, 0x20, 0x1ff, 0x100000001], @name="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"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000680)={{}, r3, 0x4, @unused=[0xbf, 0x8, 0x0, 0x7], @subvolid=0xfffffffffffffffd}) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000dc0)={{}, r3, 0x2, @unused=[0x1, 0x6, 0xffffffffffffffff, 0x7557], @subvolid=0x3fffc0000}) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.347058][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x1000, 0x280, 0x550, 0x140, 0x0, 0x0, 0x2, 0x1, {0x40, 0xd232, 0x1}, {0x7, 0x1, 0x1}, {0x9, 0x4, 0x1}, {0xffffffe5, 0x8000}, 0x4, 0x0, 0x5, 0x4, 0x0, 0x1, 0xc7, 0x9, 0x7, 0x101, 0xff, 0x3, 0x11, 0x4, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.354419][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 276.363143][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.382793][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:35 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.401846][ T6122] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.414380][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 276.414709][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 276.438987][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 276.443764][ T6122] 0ªX: entered promiscuous mode [ 276.444460][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 276.448701][ T6122] 0ªX: left allmulticast mode 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYBLOB="0009000014000100ff0200000000000000000000000000010800020000000000"], 0x38}}, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) (async) writev(r1, &(0x7f0000019140)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x1e}, {&(0x7f000001a380)="77dc86607bba3b5624de1b24c3625894d78d8f044195e92e2f122509877dc6fac1b1f0222c976765c82e421465989181b2893cd5626624bca7657eb247012baf7d23bfd30471b75d6dab5e5a35a52237f84b9ee49f46353e8e754b84758e565d0423175de7fc35c283c613770995a7ced4d02050410ca8c6f1fa1f2c99294bedaa48c03db090df"}], 0x1) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="f800000016000000000000000000000000000000000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000000000000000000000000000000000ffffac1414aa000000000000000000000000000000000000000000000000000000000000000000000400"/176], 0xf8}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={{r4}, r3, 0xc, @unused=[0x87, 0x2000000004, 0x10001, 0x7fffffffffffffff], @devid}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{r2}, r3, 0x10, @unused=[0x3, 0x166, 0x24edff3e, 0x41c], @devid}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r3) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000100)={{r0}, r3, 0x2, @inherit={0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000003000000000000007f0000000000f0ff060000000000000001000000000000007f000000010400000000000000f70000ff7f000000000000030000000089000003000000000000000100008000000000ffffff7f00000000"]}, @subvolid=0x4}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000340)={{}, r3, 0x10, @unused=[0x401, 0xbda, 0x6, 0x1], @name="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"}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000200)={{}, r3, 0x8, @unused=[0x6, 0x20, 0x1ff, 0x100000001], @name="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"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000680)={{}, r3, 0x4, @unused=[0xbf, 0x8, 0x0, 0x7], @subvolid=0xfffffffffffffffd}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000dc0)={{}, r3, 0x2, @unused=[0x1, 0x6, 0xffffffffffffffff, 0x7557], @subvolid=0x3fffc0000}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 02:08:35 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.504064][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) [ 276.522773][ T5196] Bluetooth: hci3: wrong event for mode 0 02:08:35 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) [ 276.542481][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.544304][ T6137] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.549237][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.568930][ T6137] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.582698][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 276.590289][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 276.598870][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) [ 276.598967][ T6137] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.632387][ T6137] 1ªX: renamed from 00ªX [ 276.644302][ T6137] 1ªX: left promiscuous mode [ 276.648770][ T6137] 1ªX: entered allmulticast mode [ 276.656183][ T6137] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x240c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x9800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c40991fbc34975c7c2e487c92476e8935e8ba209b6f88e4d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d617b97d555cd9448a2a3bd9414d6ac678338b9a0ee59f60"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e5b46f5cdd468f923e7642aed70a77ce854052bd7c9b73ba"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "84cddd7a0d48e53140a74f2571fb480b0bdc60b3eb7f2f9a"}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40) write(r0, &(0x7f0000001400)="bb", 0x1) sendfile(r0, r1, 0x0, 0x11f06) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 276.708063][ T39] audit: type=1800 audit(1681610915.398:18): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1175 res=0 errno=0 [ 276.708709][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.731565][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 276.732497][ T39] audit: type=1804 audit(1681610915.398:19): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir407244968/syzkaller.RG5iDX/96/file0" dev="sda1" ino=1175 res=1 errno=0 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x240c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x9800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c40991fbc34975c7c2e487c92476e8935e8ba209b6f88e4d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d617b97d555cd9448a2a3bd9414d6ac678338b9a0ee59f60"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e5b46f5cdd468f923e7642aed70a77ce854052bd7c9b73ba"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "84cddd7a0d48e53140a74f2571fb480b0bdc60b3eb7f2f9a"}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40) write(r0, &(0x7f0000001400)="bb", 0x1) sendfile(r0, r1, 0x0, 0x11f06) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x240c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x9800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c40991fbc34975c7c2e487c92476e8935e8ba209b6f88e4d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d617b97d555cd9448a2a3bd9414d6ac678338b9a0ee59f60"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e5b46f5cdd468f923e7642aed70a77ce854052bd7c9b73ba"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "84cddd7a0d48e53140a74f2571fb480b0bdc60b3eb7f2f9a"}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) write(r0, &(0x7f0000001400)="bb", 0x1) (async) sendfile(r0, r1, 0x0, 0x11f06) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) (async) [ 276.743133][ T5196] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 276.760224][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) [ 276.775121][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.799092][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) [ 276.821367][ T39] audit: type=1800 audit(1681610915.508:20): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 276.825690][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 276.852508][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 276.859040][ T4553] [ 276.861113][ T4553] ===================================== [ 276.866505][ T4553] WARNING: bad unlock balance detected! [ 276.871063][ T4553] 6.3.0-rc6-syzkaller-00183-ga7a55e27ad72 #0 Not tainted [ 276.875932][ T4553] ------------------------------------- [ 276.879794][ T4553] kworker/u19:1/4553 is trying to release lock (&conn->chan_lock) at: [ 276.885776][ T4553] [] l2cap_recv_frame+0x4ad8/0x9390 [ 276.886415][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 276.894783][ T4553] but there are no more locks to release! [ 276.904534][ T4553] [ 276.904534][ T4553] other info that might help us debug this: [ 276.910868][ T4553] 2 locks held by kworker/u19:1/4553: [ 276.914698][ T4553] #0: ffff888024ba4938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 276.922544][ T4553] #1: ffffc90003cc7da8 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 276.932142][ T4553] [ 276.932142][ T4553] stack backtrace: [ 276.937909][ T4553] CPU: 1 PID: 4553 Comm: kworker/u19:1 Not tainted 6.3.0-rc6-syzkaller-00183-ga7a55e27ad72 #0 [ 276.946841][ T4553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 276.954132][ T4553] Workqueue: hci2 hci_rx_work [ 276.958543][ T4553] Call Trace: [ 276.961474][ T4553] [ 276.964353][ T4553] dump_stack_lvl+0xd9/0x150 [ 276.968808][ T4553] lock_release+0x4f1/0x670 [ 276.972847][ T4553] ? l2cap_recv_frame+0x4ad8/0x9390 [ 276.977620][ T4553] ? lock_downgrade+0x690/0x690 [ 276.982056][ T4553] ? __mutex_lock+0x231/0x1350 [ 276.986566][ T4553] __mutex_unlock_slowpath+0x99/0x5e0 [ 276.987271][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 276.990903][ T4553] ? wait_for_completion_io_timeout+0x20/0x20 [ 276.990961][ T4553] l2cap_recv_frame+0x4ad8/0x9390 [ 277.005379][ T4553] ? hci_rx_work+0x6e5/0x1340 [ 277.009892][ T4553] ? lock_downgrade+0x690/0x690 [ 277.013735][ T4553] ? rcu_is_watching+0x12/0xb0 [ 277.017854][ T4553] ? l2cap_info_timeout+0x80/0x80 [ 277.022145][ T4553] ? __mutex_lock+0x231/0x1350 [ 277.026162][ T4553] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 277.030658][ T4553] ? wait_for_completion_io_timeout+0x20/0x20 [ 277.036540][ T4553] ? hci_rx_work+0x6b9/0x1340 [ 277.041266][ T4553] ? hci_conn_enter_active_mode+0x129/0x360 [ 277.046506][ T4553] ? lock_downgrade+0x690/0x690 [ 277.050735][ T4553] ? hci_conn_check_link_mode+0x550/0x550 [ 277.056293][ T4553] l2cap_recv_acldata+0xa80/0xbf0 [ 277.061138][ T4553] hci_rx_work+0x709/0x1340 [ 277.065106][ T4553] process_one_work+0x991/0x15c0 [ 277.069976][ T4553] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 277.075429][ T4553] ? spin_bug+0x1c0/0x1c0 [ 277.076587][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 277.079601][ T4553] ? _raw_spin_lock_irq+0x45/0x50 [ 277.085481][ T5196] Bluetooth: hci3: wrong event for mode 0 [ 277.090180][ T4553] worker_thread+0x669/0x1090 [ 277.090232][ T4553] ? __kthread_parkme+0x163/0x220 [ 277.090273][ T4553] ? process_one_work+0x15c0/0x15c0 [ 277.108814][ T4553] kthread+0x2e8/0x3a0 [ 277.112696][ T4553] ? kthread_complete_and_exit+0x40/0x40 [ 277.117938][ T4553] ret_from_fork+0x1f/0x30 [ 277.122385][ T4553] 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x240c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x9800) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c40991fbc34975c7c2e487c92476e8935e8ba209b6f88e4d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d617b97d555cd9448a2a3bd9414d6ac678338b9a0ee59f60"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e5b46f5cdd468f923e7642aed70a77ce854052bd7c9b73ba"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "84cddd7a0d48e53140a74f2571fb480b0bdc60b3eb7f2f9a"}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40) write(r0, &(0x7f0000001400)="bb", 0x1) (async) sendfile(r0, r1, 0x0, 0x11f06) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x518}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x462}, @alu={0x7, 0x1, 0x6, 0xb, 0x2, 0xffffffffffffffc0, 0x10}, @map_fd={0x18, 0x8}, @generic={0x9, 0xc, 0x2, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000180)='syzkaller\x00', 0x100, 0xe0, &(0x7f00000001c0)=""/224, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x2, 0x4, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1]}, 0x80) quotactl_fd$Q_QUOTAOFF(r0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x1c, 0x3, &(0x7f00000016c0)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x220801, 0x0) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "739801f8f0de100b7a25f7d1d56f1fe9f1288d3852416ed0f0542a9265149724d7de4f793ee8cdd812c167d9b2a8eea1509e123796cdbc444a9d9f5f364adcd6"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) dup3(r3, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}]}}, 0x1f) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x518}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x462}, @alu={0x7, 0x1, 0x6, 0xb, 0x2, 0xffffffffffffffc0, 0x10}, @map_fd={0x18, 0x8}, @generic={0x9, 0xc, 0x2, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000180)='syzkaller\x00', 0x100, 0xe0, &(0x7f00000001c0)=""/224, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x2, 0x4, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1]}, 0x80) quotactl_fd$Q_QUOTAOFF(r0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x1c, 0x3, &(0x7f00000016c0)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x220801, 0x0) (async) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "739801f8f0de100b7a25f7d1d56f1fe9f1288d3852416ed0f0542a9265149724d7de4f793ee8cdd812c167d9b2a8eea1509e123796cdbc444a9d9f5f364adcd6"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async) dup3(r3, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}]}}, 0x1f) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) [ 277.128302][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 277.136358][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x518}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x462}, @alu={0x7, 0x1, 0x6, 0xb, 0x2, 0xffffffffffffffc0, 0x10}, @map_fd={0x18, 0x8}, @generic={0x9, 0xc, 0x2, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000180)='syzkaller\x00', 0x100, 0xe0, &(0x7f00000001c0)=""/224, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x2, 0x4, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1]}, 0x80) quotactl_fd$Q_QUOTAOFF(r0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x76, 0x1}, 0x14}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x1c, 0x3, &(0x7f00000016c0)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x220801, 0x0) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "739801f8f0de100b7a25f7d1d56f1fe9f1288d3852416ed0f0542a9265149724d7de4f793ee8cdd812c167d9b2a8eea1509e123796cdbc444a9d9f5f364adcd6"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async) dup3(r3, r1, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, r2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 277.143429][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 277.148217][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 277.173352][ T63] Bluetooth: hci3: wrong event for mode 0 [ 277.174745][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}]}}, 0x1f) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.209027][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 277.214596][ T4553] Bluetooth: hci3: wrong event for mode 0 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)={0x3d}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 277.231060][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 277.239484][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:35 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:35 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.251016][ T63] Bluetooth: hci3: wrong event for mode 0 02:08:35 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)={0x3d}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 277.281102][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:35 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.287780][ T63] Bluetooth: hci3: wrong event for mode 0 02:08:36 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) [ 277.313897][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:36 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.338609][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:36 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 02:08:36 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)={0x3d}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 277.345021][ T63] Bluetooth: hci3: wrong event for mode 0 02:08:36 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r0, r0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.362288][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:36 executing program 3: syz_emit_vhci(0x0, 0x0) 02:08:36 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 02:08:36 executing program 3: syz_emit_vhci(0x0, 0x0) [ 277.410605][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:36 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x0, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 277.422692][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 277.429904][ T63] Bluetooth: hci3: wrong event for mode 0 02:08:36 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r0, r0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.442857][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:36 executing program 3: syz_emit_vhci(0x0, 0x0) 02:08:36 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x0, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed}}}, 0x9) 02:08:36 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) [ 277.474994][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 277.476199][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:36 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x0, 0x7, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r0, r0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.482248][ T63] Bluetooth: hci3: wrong event for mode 0 [ 277.504919][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:36 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.508015][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 277.519933][ T4553] Bluetooth: hci3: wrong event for mode 0 [ 277.525823][ T4553] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 277.533677][ T4553] Bluetooth: hci1: wrong event for mode 0 02:08:36 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x0, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.575394][ T4553] Bluetooth: hci2: ACL packet for unknown connection handle 0 02:08:36 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x0, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 1: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x22, 0x2}) [ 277.579740][ T63] Bluetooth: hci1: ACL packet for unknown connection handle 0 02:08:36 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.592216][ T4553] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 277.601182][ T63] Bluetooth: hci1: wrong event for mode 0 [ 277.619666][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 277.625466][ T4553] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 277.633016][ T5196] Bluetooth: hci3: ACL packet for unknown connection handle 0 02:08:36 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x35, 0x0, 0x3}}}, 0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x706, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(r1, r1, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x7, 0x101, 0x3ff}}]}}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1a, 0xbd, &(0x7f0000000540)="577fa12a318b59954555fd857e840bd9c28ad28cc14e6544fb5e", &(0x7f0000000580)=""/189, 0x8, 0x0, 0x6, 0xb7, &(0x7f0000000640)="f6ab7767e99a", &(0x7f0000000680)="b6ba9f9135aa9e64d9e4f6637f671ba49367f160310b0fcd72b35cf47f635abefdeb612b2c2586fc52a85e2b363d9710e54afdb93bf88561f72115530c9436dc785414c6cf499c04606e9bf06a399fe72213d6dcfedf3dfa5f8da513a4abb042939e5f8e058b8d6dbac79b010d2075a1d52bb577800e53efd81f1d92a97c0685846ae4c4ca3bd72fd5c5ce1a74f646dd27c6a838e82c4b1c0fdf8690294f855ba2fef5a8e49fe0d3fdfad47dab7f034f17c99b276b42f6", 0x1}, 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x1}, {0x8, 0x7}, {0xff, 0x7}, {0x9, 0x4}, {0x90, 0x1}, {0x3}, {0x7, 0x5}, {0x2, 0x7}, {0x1}, {0xc0, 0x1}, {0x3, 0x1}, {0xf2}, {0xba, 0x7}, {0x2e, 0x3}, {0x4, 0x2}, {0xea, 0x5}, {0x4}, {0x20, 0x3}], "af73f780ebedc383"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x4}, {0x0, 0x1}, {}, {0x60, 0x5}, {0x80, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x80, 0x1}, {0xff, 0x2}, {0x83, 0x5}, {0xfd, 0x5}], "444089a993d62736"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x80, 0x5}, {0x70, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0xfa, 0x1}], "79fd85389fc1ef9a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xd3, 0x2}, {0x0, 0x4}, {0x2f, 0x4}, {0x0, 0x3}, {0x5, 0x5}], "2287461f56ef3236"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x5, 0x3}, {0x67, 0x5}, {0x6, 0x2}, {0xe1, 0x4}, {0x4}, {0x1, 0x2}, {0x80, 0x6}], "aa8c75f20c97410a"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6, 0x5}, {0x81, 0x3}, {0x7, 0x5}], "71deff4520bbf8c9"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00'}) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) 02:08:36 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x6}}, @l2cap_disconn_rsp={{0x7, 0x92, 0x4}, {0x6, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x20, 0x8}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x5, 0x0, 0x101, 0x3ff}}]}}, 0x2b) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000d80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "b4545ef72d51bac0504a674db7093bd67d9bc5f1336b0f8e8cf6eac03abec429611cfaf0c2468870d2b3dcbf43ba9160"}, 0x34) [ 277.654309][ T4553] Bluetooth: hci1: wrong event for mode 0 02:08:36 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc9, 0x9, 0x1f}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @none, "09f66e9b374c9dabaabfe5ec570bb52360f130b425dd51d080fdd5c3353af2591274cee6be304b93fa1639416723bd7f31ffd0ad63b766198c8cdacafc8179a1e0119087b21a5705558bf9965e0f1bf47cb0aa29863eb550f9248886b4e670c388fe9736cf47233644f7b0179e4f9d7cd48437a00cfb17b465ca43b4f7f7deb5e158efc70533b6d51aef1d6968ce10740eb64af23e6d8d711769f5ff303d24dafb4be32a358d0bf537adb7e63859fced95931b02b56be71c86c38909a09d89c51293b9e714f98a8faadb01bd36043d7dadb53aba226d361662900d436f345738a64972a289b64bd171f0e78912130be568e091ecd5285df7"}}}, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602 VM DIAGNOSIS: 02:08:36 Registers: info registers vcpu 0 RAX=000000963aa1f7d5 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000096 RSI=ffff88802c628240 RDI=000000000000dc0d RBP=ffff88802c628240 RSP=ffffc90000007ed0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffc90000007ff8 R12=000000000000dc0d R13=0000000000000019 R14=0000000000000000 R15=ffff88802c62b800 RIP=ffffffff81363545 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c000056090 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000057a32404 CR3=0000000024786000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=d1fbe238f581318718f3af2b1cd15be9 XMM01=00000000000000000000000000000000 XMM02=0000000000000000411996b556e03ad7 XMM03=32322035312e322e302e303120343031 XMM04=00000000000000050000000000a4f8e2 XMM05=00000000000000000000000001f012f0 XMM06=00000000000000050000000000a4f8e7 XMM07=00000000000000000000000001f012ee XMM08=00000000000000060000000000a522ec XMM09=00000000000000000000000001f012eb XMM10=00000000000000030000000000a4c57b XMM11=00000000000000000000000001f012ec XMM12=00000000000000060000000000a52178 XMM13=00000000000000000000000001f012ea XMM14=00000000000000040000000000a4d8dd XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84829205 RDI=ffffffff9206f760 RBP=ffffffff9206f720 RSP=ffffc90003cc7458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6666666666663c5b R12=0000000000000000 R13=0000000000000066 R14=ffffffff848291a0 R15=0000000000000000 RIP=ffffffff8482922f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000100 CR3=0000000022fba000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000001a4 XMM01=6f990d8a738665bd829e23ffe49ba3bb XMM02=823f912d08a2742bf2edbfea04d23e48 XMM03=7244afc63188b8ea7316e569665f7c71 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000024704 RBX=0000000000000001 RCX=ffffc90027d7e000 RDX=0000000000040000 RSI=ffffffff81676446 RDI=0000000000000001 RBP=ffffc90003c87920 RSP=ffffc90003c878e8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000094001 R12=0000000000000027 R13=ffff88801b339d40 R14=0000000000000200 R15=ffffc90003c87970 RIP=ffffffff81676448 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffd32004 CR3=000000001a704000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff000000000000ff00000000000000 XMM02=ffffffffffff00000000000000000000 XMM03=000000000000000000000000000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffff000000000000ffffffffffffff00 XMM06=ffffffffffffff00ffffffffffffffff XMM07=00000000000000000000000000000000 XMM08=65726168732f6372732f2e2e2f2e2e00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=ffff88801e02d7c0 RCX=0000000000000000 RDX=ffff88801e02d7c0 RSI=ffffffff814cd5e0 RDI=0000000000000007 RBP=ffffc90007e902c8 RSP=ffffc90007e97be8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000094001 R12=0000000000000000 R13=ffffc90007e90000 R14=dffffc0000000000 R15=ffff88801e02ddb8 RIP=ffffffff8182eb9b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5dbcdb0 CR3=0000000046da4000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=00000000000000003ef300de7fbb6cce XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000